PT-2021-7437 · Samba+4 · Samba+4

Joseph Sutton · Published 2021-07-29 · Updated 2023-02-24 · CVE-2021-3671

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description A null pointer de-reference was found in the way Samba Kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the Samba server. The issue is related to errors in pointer dereferencing, allowing a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2021-2991

ALT-PU-2021-3075

ALT-PU-2021-3125

ALT-PU-2021-3146

AZL-37004

AZL-7354

BDU:2022-06245

CVE-2021-3671

DLA-3206-1

DSA-5287-1

ECHO-F6D0-C68C-35AD

MGASA-2021-0543

MGASA-2022-0468

OESA-2021-1417

OPENSUSE-SU-2023:0019-1

OPENSUSE-SU-2023:0020-1

OPENSUSE-SU-2024:12580-1

USN-5142-1

USN-5142-2

USN-5142-3

USN-5174-1

USN-5174-2

USN-5675-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Samba

Ubuntu

References · 79

• https://github.com/heimdal/heimdal/commit/04171147948d0a3636bc6374181926f0fb2ec83a · Patch
• https://osv.dev/vulnerability/ALPINE-CVE-2021-3671 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5675-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3671 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0468.html · Security Note
• https://osv.dev/vulnerability/AZL-7354 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5142-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25722 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1417 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2023:0020-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25718 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/AYXWFESBZJMBNACFDHWWH7KETGKUXDPO · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2021-0543 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5287-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5174-1 · Vendor Advisory