PT-2019-6227 · Samba+5 · Samba+5

Michael Hanselmann · Published 2019-05-30 · Updated 2022-10-14 · CVE-2021-43566

Positive Technologies (AI Summary)

CVSS v3.1

2.5

Low

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.13.16

Description The issue allows a malicious client to create a directory in an area of the server file system not exported under the share definition by using an SMB1 or NFS race. This can happen if SMB1 is enabled or the share is also available via NFS. The vulnerability is related to the unix extensions of SMB1 and NFS in the Samba package, which is caused by incorrect synchronization during concurrent execution.

Recommendations For versions prior to 4.13.16, update to version 4.13.16 or later to resolve the issue. As a temporary workaround, consider disabling SMB1 or restricting access to NFS shares to minimize the risk of exploitation. Avoid using SMB1 or NFS for sensitive data until the issue is resolved.

Exploit

Fix

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2021-1568

ALT-PU-2021-2045

ALT-PU-2021-2081

AZL-37006

AZL-7489

BDU:2022-05713

CVE-2021-43566

ECHO-D69C-9803-2415

OESA-2022-1507

OPENSUSE-SU-2022:0283-1

OPENSUSE-SU-2022_0283-1

SUSE-SU-2022:0283-1

SUSE-SU-2022:0323-1

USN-5260-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Samba

Suse

Ubuntu

References · 59

• 🔥 https://github.com/horizon3ai/CVE-2021-44142 · Exploit
• 🔥 https://bugzilla.samba.org/show_bug.cgi?id=13979 · Exploit
• https://samba.org/samba/security/CVE-2021-43566.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-43566 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-43566 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5260-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0283-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-7489 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1507 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0283-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-43566 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0323-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-44142 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43566 · Security Note