OPENSUSE-SU-2021:1471-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 15 Nov 2021, 06:34
Last modified:04 Feb 2026, 03:31

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

15 Nov 2021, 06:34
Published
Vulnerability first disclosed
04 Feb 2026, 03:31
Last Modified
Vulnerability information updated

Description

Security update for samba This update for samba fixes the following issues: - CVE-2016-2124: Fixed not to fallback to non spnego authentication if we require kerberos (bsc#1014440). - CVE-2020-25717: Fixed privilege escalation inside an AD Domain where a user could become root on domain members (bsc#1192284). - CVE-2021-23192: Fixed dcerpc requests to don't check all fragments against the first auth_state (bsc#1192214). This update was imported from the SUSE:SLE-15-SP2:Update update project.

Affected Systems

  • opensuse•samba&distro=openSUSE Leap 15.2

    < 4.11.14+git.308.666c63d4eea-lp152.3.28.1

References (7)