K21312421 : Samba vulnerabilities CVE-2020-25718 and CVE-2021-23192

Security Advisory Description

• CVE-2020-25718

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrator tickets.

• CVE-2021-23192

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.

Impact

There is no impact; F5 products are not affected by this vulnerability.