Back to feed
EUVD-2021-30995 · Published Feb 21, 2022
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
Technologies
Redhat Enterprise Linux Server Update Services For Sap SolutionsRedhat Enterprise Linux For Power Big EndianFedoraproject FedoraRedhat Enterprise Linux Server TusRedhat Enterprise Linux For Ibm Z SystemsRedhat Gluster StorageRedhat Enterprise Linux Server AusRedhat Enterprise Linux EusRedhat Enterprise Linux For Ibm Z Systems EusRedhat Enterprise Linux For Scientific ComputingRedhat Enterprise Linux For Power Little EndianRedhat Virtualization HostRedhat Enterprise Linux DesktopRedhat Enterprise Linux WorkstationRedhat Enterprise LinuxSynology Diskstation ManagerCanonical Ubuntu LinuxRedhat Enterprise Linux For Power Little Endian EusSamba SambaRedhat Enterprise Linux Resilient StorageRedhat Codeready Linux BuilderRedhat Enterprise Linux ServerDebian Debian Linux
Weaknesses
CWE-125CWE-787
CVSS scores
- v3.18.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - v2.09.0
AV:N/AC:L/Au:S/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- https://www.zerodayinitiative.com/blog/2022/2/1/cve-2021-44142-details-on-a-samba-code-execution-bug-demonstrated-at-pwn2own-austin
- https://bugzilla.samba.org/show_bug.cgi?id=14914
- https://kb.cert.org/vuls/id/119678
- https://security.gentoo.org/glsa/202309-06
- https://www.samba.org/samba/security/CVE-2021-44142.html
- https://www.kb.cert.org/vuls/id/119678
Potentially impacted assets
See if this affects your attack surface
