CVE-2021-44142: canonical ubuntu_linux Out-of-bounds Read
Vulnerability summary
CVE-2021-44142 is a high (CVSS 9.0) Out-of-bounds Read vulnerability in canonical ubuntu_linux. EPSS estimates a 73.59% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities.
Not severe (CVSS 8.8, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 7 · Related 6Timeline
- 21-02-2022PublishedVulnerability first disclosed.
- 23-04-2025Last modifiedVulnerability information updated.
Description
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
CVSS metrics
7 scores · 6 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · Red hatEcosystem advisory · calculated9.9CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
73.59%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
Increase +0.18 pp
From 73.41% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat71 products
- codeready_linux_builderna
- enterprise_linuxEOL7.0 | 8.0
- enterprise_linux_desktop7.0
- enterprise_linux_eus8.2 | 8.4
- enterprise_linux_for_ibm_z_systems7.0 | 8.0
Suse36 products
- samba&distro=HPE Helion OpenStack 8< 4.6.16+git.320.a2d80a7efef-3.70.1
- samba&distro=SUSE Enterprise Storage 6< 4.9.5+git.483.212a7ebca6b-3.64.1
- samba&distro=SUSE Enterprise Storage 7< 4.11.14+git.319.91d693db37c-4.35.1
- samba&distro=SUSE Linux Enterprise High Availability Extension 12 SP3< 4.6.16+git.320.a2d80a7efef-3.70.1
- samba&distro=SUSE Linux Enterprise High Availability Extension 12 SP4< 4.6.16+git.320.a2d80a7efef-3.70.1
Debian2 products
- samba< 2:4.9.5+dfsg-5+deb10u3 | < 2:4.13.13+dfsg-1~deb11u3 | < 2:4.16.0+dfsg-2
- debian_linuxEOL10.0 | 11.0
Alpine1 product
- samba≥ 4.14.0, < 4.13.17-r0 | ≥ 4.14.0, < 4.14.12-r0 | ≥ 4.14.0, < 4.15.12-r0
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 20.04 | 21.10
Fedoraproject1 product
- fedoraEOL34 | 35
Samba1 product
- samba≥ unspecified, < 4.13.17 | ≥ unspecified, < 4.14.12 | ≥ unspecified, < 4.15.5 | < 4.13.17 | ≥ 4.14.0, < 4.14.12 | ≥ 4.15.0, < 4.15.5
Synology1 product
- diskstation_manager≥ 6.2, < 6.2.4-25556.4
Ubuntu1 product
- samba< 2:4.13.17~dfsg-0ubuntu0.21.04.1 | < 2:4.7.6+dfsg~ubuntu-0ubuntu2.28 | < 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12 | < 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1
9 vendors · 115 products
References
47 links- kb.cert.org/vuls/id/119678Third Party Advisory
- security.gentoo.org/glsa/202309-06Vendor Advisory
