Lucene search
PRIOn knowledge basePRION:CVE-2021-44142HistoryFeb 21, 2022 - 3:15 p.m.
Heap overflow
2022-02-2115:15:00
PRIOn knowledge base
www.prio-n.com
11
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide “…enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver.” Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 18.04 | |
| ubuntu_linux | eq | 14.04 | |
| ubuntu_linux | eq | 20.04 | |
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 21.10 | |
| debian_linux | eq | 10.0 | |
| debian_linux | eq | 11.0 | |
| fedora | eq | 34 | |
| fedora | eq | 35 | |
| enterprise_linux | eq | 7.0 |
Related
ubuntucve
ubuntucve
CVE-2021-44142
2022-01-31 00:00:00
zdi
zdi
nessus
nessus
SUSE SLES15 Security Update : samba (SUSE-SU-2022:0251-1)
2022-03-25 00:00:00
Ubuntu 18.04 LTS : Samba vulnerability (USN-5260-2)
2022-02-01 00:00:00
RHEL 7 : samba (RHSA-2022:0328)
2022-02-01 00:00:00
ubuntu
ubuntu
Samba vulnerability
2022-02-03 00:00:00
Samba vulnerability
2022-02-01 00:00:00
Samba vulnerabilities
2022-02-01 00:00:00
cert
cert
Samba vfs_fruit module insecurely handles extended file attributes
2022-01-31 00:00:00
samba
samba
Out-of-bounds heap read/write vulnerability
2022-01-31 00:00:00
redhatcve
redhatcve
CVE-2021-44142
2022-01-31 15:06:30
redhat
redhat
(RHSA-2022:0330) Critical: samba security update
2022-01-31 15:40:27
(RHSA-2022:0663) Critical: samba security update
2022-02-23 18:47:36
(RHSA-2022:0458) Critical: samba security update
2022-02-07 17:28:27
cve
cve
CVE-2021-44142
2022-02-21 15:15:07
oraclelinux
oraclelinux
samba security and bug fix update
2022-02-01 00:00:00
samba security and bug fix update
2022-02-01 00:00:00
ibm
ibm
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0284-1)
2022-02-03 00:00:00
openSUSE: Security Advisory for samba (openSUSE-SU-2022:0287-1)
2022-02-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:0252-1)
2022-02-03 00:00:00
nvd
nvd
CVE-2021-44142
2022-02-21 15:15:07
osv
osv
samba - security update
2022-02-11 00:00:00
samba vulnerability
2022-02-01 11:56:09
CVE-2021-44142
2022-02-21 15:15:07
suse
suse
Security update for samba (critical)
2022-02-01 00:00:00
Security update for samba (critical)
2022-02-01 00:00:00
Security update for samba (important)
2022-02-01 00:00:00
cvelist
cvelist
CVE-2021-44142
2022-02-21 00:00:00
rocky
rocky
samba security and bug fix update
2022-02-01 03:32:27
samba security and bug fix update
2022-01-31 15:40:41
paloalto
paloalto
Informational: Impact of the Samba Vulnerability CVE-2021-44142 on PAN-OS
2022-03-09 17:00:00
cbl_mariner
cbl_mariner
CVE-2021-44142 affecting package samba 4.12.5-6
2024-07-05 21:08:40
threatpost
threatpost
Samba 'Fruit' Bug Allows RCE, Full Root User Access
2022-02-01 20:02:02
f5
f5
K84695749 : Samba vulnerability CVE-2021-44142
2022-02-02 00:00:00
debiancve
debiancve
CVE-2021-44142
2022-02-21 15:15:07
trendmicroblog
trendmicroblog
The Samba Vulnerability: What is CVE-2021-44142 and How to Fix It
2022-02-02 00:00:00
githubexploit
githubexploit
Exploit for Out-of-bounds Write in Samba
2022-03-29 17:32:25
Exploit for Out-of-bounds Read in Samba
2022-04-22 04:46:54
Exploit for Out-of-bounds Write in Samba
2022-03-29 19:03:38
veracode
veracode
Remote Code Execution (RCE)
2022-02-03 11:21:59
alpinelinux
alpinelinux
CVE-2021-44142
2022-02-21 15:15:07
cloudfoundry
cloudfoundry
USN-5260-2: Samba vulnerability | Cloud Foundry
2022-03-10 00:00:00
almalinux
almalinux
Critical: samba security and bug fix update
2022-01-31 15:40:41
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2022-02-01 18:03:11
kaspersky
kaspersky
KLA12439 Multiple vulnerabilities in Samba
2022-01-31 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.14.12-alt1
2022-02-09 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: samba-4.14.12-0.fc34
2022-02-03 01:12:33
[SECURITY] Fedora 35 Update: samba-4.15.5-0.fc35
2022-02-02 01:26:36
thn
thn
New Samba Bug Allows Remote Attackers to Execute Arbitrary Code as Root
2022-02-01 04:16:00
malwarebytes
malwarebytes
amazon
amazon
Critical: samba
2022-02-03 19:29:00
Critical: samba
2022-02-10 21:59:00
debian
debian
[SECURITY] [DSA 5071-1] samba security update
2022-02-11 15:11:29
redos
redos
ROS-20220208-01
2022-02-08 00:00:00
cisa
cisa
Samba Releases Security Updates
2022-02-01 00:00:00
freebsd
freebsd
samba -- Multiple Vulnerabilities
2022-01-31 00:00:00
mageia
mageia
Updated samba packages fix security vulnerability
2022-02-09 23:46:00
gentoo
gentoo
Samba: Multiple Vulnerabilities
2023-09-17 00:00:00