ALPINE-CVE-2021-44141

Advisory lineage Upstream: 1 Downstream: 0
Upstream
CVE-2021-44141
Published: 21 Feb 2022, 18:15
Last modified:19 Nov 2025, 06:19

Vulnerability Summary

Overall Risk (default)
low
17/100
CVSS Score
4.3 MEDIUM
3.1 (osv_alpine)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

21 Feb 2022, 18:15
Published
Vulnerability first disclosed
19 Nov 2025, 06:19
Last Modified
Vulnerability information updated

Description

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

CVSS Metrics

  • v3.1•MEDIUM•Score: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected Systems

  • alpine•samba

    < 4.15.5-r0 | < 4.15.5-r0

References (1)