DeutschShown in its original language — a full translation is planned for a future version.
Samba: Mehrere Schwachstellen
view advisory published 2022-01-31
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Informationen offenzulegen, um einen Denial of Service Zustand herbeizuführen, um Rechte zu erlangen und um beliebigen Code mit Root-Rechten auszuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-0336US | high8.8OT elevated | — | ||
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks… | ||||
| CVE-2021-44141US | medium4.3 | — | ||
All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system no… | ||||
| CVE-2021-44142US | high8.8 | Exploit | ||
The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileser… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory vom 2022-01-31external
- Red Hat Security Advisory vom 2022-01-31external
- Red Hat Security Advisory vom 2022-01-31external
- Red Hat Security Advisory vom 2022-01-31external
- Red Hat Security Advisory vom 2022-01-31external
- Red Hat Security Advisory RHSA-2022:0457 vom 2022-02-08external
- Red Hat Security Advisory RHSA-2022:0458 vom 2022-02-08external
- Red Hat Security Advisory RHSA-2022:0663 vom 2022-02-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan