CVE-2021-20254

Advisory lineage Upstream: 0 Downstream: 27
Modified
Published: 05 May 2021, 13:36
Last modified:03 Aug 2024, 17:37

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
6.8 MEDIUM
v3.1 (nvd)
EPSS Score
1.76% LOW
2% probability +1.48%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

05 May 2021, 13:36
Published
Vulnerability first disclosed
03 Aug 2024, 17:37
Last Modified
Vulnerability information updated

Description

A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.

CVSS Metrics

  • v3.1•MEDIUM•Score: 6.8CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
  • v2.0•MEDIUM•Score: 4.9AV:N/AC:M/Au:S/C:P/I:P/A:N

EPSS Trends

Current EPSS score: 1.76%• Percentile: 83%

Techniques & Countermeasures

  • CWE-125•Out-of-bounds Read

    The product reads data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • debian•debian_linux

    9.0

  • fedoraproject•fedora

    32 | 33

  • redhat•enterprise_linux

    7.0 | 8.0

  • samba•samba

    ≥ 3.6.0, < 4.12.15 | ≥ 4.13.0, < 4.13.8 | ≥ 4.14.0, < 4.14.4

References (7)