PT-2021-8090 · Samba+6 · Samba+6

Andrew Bartlett · Published 2021-04-26 · Updated 2025-08-21 · CVE-2021-3670

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description The issue is related to the MaxQueryDuration not being honored in Samba AD DC LDAP, which can lead to uncontrolled resource consumption. This can allow a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2022-1003

ALT-PU-2022-1004

ALT-PU-2022-1477

ALT-PU-2022-1478

ALT-PU-2023-1615

ALT-PU-2023-1616

AZL-10662

BDU:2024-06958

CVE-2021-3670

OESA-2022-1735

OESA-2024-1703

OPENSUSE-SU-2022_1576-1

OPENSUSE-SU-2022_2307-1

OPENSUSE-SU-2024:11882-1

SUSE-SU-2022:1576-1

SUSE-SU-2022:2307-1

SUSE-SU-2022_1576-1

SUSE-SU-2022_2307-1

USN-5542-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Samba

Suse

Ubuntu

References · 56

• 🔥 https://github.com/horizon3ai/CVE-2021-44142 · Exploit
• https://gitlab.com/samba-team/samba/-/commit/1d5b155619bc532c46932965b215bd73a920e56f · Patch
• https://bugzilla.samba.org/show_bug.cgi?id=14694 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:1576-1 · Vendor Advisory
• https://gitlab.com/samba-team/samba/-/commit/86fe9d48883f87c928bf31ccbd275db420386803 · Patch
• https://osv.dev/vulnerability/USN-5542-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1735 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32742 · Vendor Advisory
• https://gitlab.com/samba-team/samba/-/commit/2b3af3b560c9617a233c131376c870fce146c002 · Patch
• https://gitlab.com/samba-team/samba/-/commit/e1ab0c43629686d1d2c0b0b2bcdc90057a792049 · Patch
• https://osv.dev/vulnerability/OESA-2024-1703 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3670 · Security Note
• https://ubuntu.com/security/CVE-2022-32744 · Vendor Advisory
• https://gitlab.com/samba-team/samba/-/commit/dcfcafdbf756e12d9077ad7920eea25478c29f81 · Patch
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Vendor Advisory