CVE-2021-44142
Vulnerability Summary
Timeline
Description
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
CVSS Metrics
- v3.1•HIGH•Score: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- v3.1•CRITICAL•Score: 9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- v2.0•HIGH•Score: 9AV:N/AC:L/Au:S/C:C/I:C/A:C
EPSS Trends
Current EPSS score: 73.41%• Percentile: 99%
Techniques & Countermeasures
- CWE-125•Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
- CWE-787•Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Affected Systems
- alpine•samba
≥ 4.14.0, < 4.13.17-r0 | ≥ 4.14.0, < 4.14.12-r0 | ≥ 4.14.0, < 4.15.12-r0 | ≥ 4.14.0, < 4.15.12-r0
- canonical•ubuntu_linux
14.04 | 16.04 | 18.04 | 20.04 | 21.10
- debian•samba
< 2:4.13.13+dfsg-1~deb11u3 | < 2:4.16.0+dfsg-2 | < 2:4.16.0+dfsg-2 | < 2:4.16.0+dfsg-2
- debian•debian_linux
10.0 | 11.0
- fedoraproject•fedora
34 | 35
- redhat•codeready_linux_builder
na
- redhat•enterprise_linux
7.0 | 8.0
- redhat•enterprise_linux_desktop
7.0
- redhat•enterprise_linux_eus
8.2 | 8.4
- redhat•enterprise_linux_for_ibm_z_systems
7.0 | 8.0
- redhat•enterprise_linux_for_ibm_z_systems_eus
8.2 | 8.4
- redhat•enterprise_linux_for_power_big_endian
7.0
- redhat•enterprise_linux_for_power_little_endian
7.0 | 8.0
- redhat•enterprise_linux_for_power_little_endian_eus
8.2 | 8.4
- redhat•enterprise_linux_for_scientific_computing
7.0
- redhat•enterprise_linux_resilient_storage
7.0
- redhat•enterprise_linux_server
7.0 | 8.1
- redhat•enterprise_linux_server_aus
8.2 | 8.4
- redhat•enterprise_linux_server_tus
8.2 | 8.4
- redhat•enterprise_linux_server_update_services_for_sap_solutions
8.1 | 8.2 | 8.4
- redhat•enterprise_linux_workstation
7.0
- redhat•gluster_storage
3.5
- redhat•virtualization_host
4.0
- redhat•ctdb
< 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs
- redhat•ctdb-debuginfo
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-206.el8rhgs
- redhat•ctdb-tests
< 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4
- redhat•ctdb-tests-debuginfo
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4
- redhat•libsmbclient
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•libsmbclient-debuginfo
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-206.el8rhgs
- redhat•libsmbclient-devel
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•libwbclient
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•libwbclient-debuginfo
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-206.el8rhgs
- redhat•libwbclient-devel
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•python3-samba
< 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs
- redhat•python3-samba-debuginfo
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-206.el8rhgs
- redhat•python3-samba-test
< 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5
- redhat•samba
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•samba-client
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•samba-client-debuginfo
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-206.el8rhgs
- redhat•samba-client-libs
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•samba-client-libs-debuginfo
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-206.el8rhgs
- redhat•samba-common
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•samba-common-libs
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•samba-common-libs-debuginfo
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-206.el8rhgs
- redhat•samba-common-tools
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•samba-common-tools-debuginfo
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-206.el8rhgs
- redhat•samba-dc
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•samba-dc-libs
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•samba-debuginfo
< 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.16-18.el7_9 | < 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.11.6-116.el7rhgs | < 0:4.14.5-206.el8rhgs | < 0:4.8.3-7.el7_6 | < 0:4.9.1-12.el7_7
- redhat•samba-debugsource
< 0:4.10.4-103.el8_1 | < 0:4.10.4-103.el8_1 | < 0:4.11.2-19.el8_2 | < 0:4.11.2-19.el8_2 | < 0:4.13.3-9.el8_4 | < 0:4.13.3-9.el8_4 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-9.el8_5 | < 0:4.14.5-206.el8rhgs
Showing first 50 affected entries in server-rendered view.
References (36)
- https://www.samba.org/samba/security/CVE-2021-44142.html
- https://www.zerodayinitiative.com/blog/2022/2/1/cve-2021-44142-details-on-a-samba-code-execution-bug-demonstrated-at-pwn2own-austin
- https://kb.cert.org/vuls/id/119678
- https://bugzilla.samba.org/show_bug.cgi?id=14914
- https://security.gentoo.org/glsa/202309-06
- https://www.kb.cert.org/vuls/id/119678
- https://access.redhat.com/errata/RHSA-2022:0328
- https://access.redhat.com/security/updates/classification/#critical
- https://bugzilla.redhat.com/show_bug.cgi?id=2034800
- https://bugzilla.redhat.com/show_bug.cgi?id=2036595
- https://bugzilla.redhat.com/show_bug.cgi?id=2046146
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0328.json
- https://access.redhat.com/security/cve/CVE-2021-44142
- https://www.cve.org/CVERecord?id=CVE-2021-44142
- https://nvd.nist.gov/vuln/detail/CVE-2021-44142
- https://access.redhat.com/errata/RHSA-2022:0329
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0329.json
- https://access.redhat.com/errata/RHSA-2022:0330
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0330.json
- https://access.redhat.com/errata/RHSA-2022:0331
- https://bugzilla.redhat.com/show_bug.cgi?id=2046173
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0331.json
- https://access.redhat.com/errata/RHSA-2022:0332
- https://bugzilla.redhat.com/show_bug.cgi?id=2046160
- https://bugzilla.redhat.com/show_bug.cgi?id=2046174
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0332.json
- https://access.redhat.com/errata/RHSA-2022:0457
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0457.json
- https://access.redhat.com/errata/RHSA-2022:0458
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0458.json
- https://access.redhat.com/errata/RHSA-2022:0663
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0663.json
- https://access.redhat.com/errata/RHSA-2022:0664
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_0664.json
- https://security-tracker.debian.org/tracker/CVE-2021-44142
- https://security.alpinelinux.org/vuln/CVE-2021-44142