PT-2022-1497 · Samba+9 · Samba+9

Stefan Behrens · Published 2022-01-31 · Updated 2024-11-15 · CVE-2021-44141

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.15.5

Description The issue allows a malicious client to use a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. This can be exploited when SMB1 with unix extensions is enabled.

Recommendations For versions prior to 4.15.5, update to version 4.15.5 or later to resolve the issue. As a temporary workaround, consider disabling SMB1 with unix extensions until a patch is available. Restrict access to sensitive areas of the server file system to minimize the risk of exploitation.

Exploit

Fix

DoS

Information Disclosure

Link Following

Weakness Enumeration

CWE-200

CWE-59

Related Identifiers

ALSA-2022:2074

ALT-PU-2022-2144

ALT-PU-2022-2438

ALT-PU-2024-14683

AZL-37007

AZL-8610

BDU:2022-00685

CESA-2022_2074

CVE-2021-44141

ECHO-BBB6-A533-46A3

MGASA-2022-0054

OESA-2022-1770

OPENSUSE-SU-2022:0283-1

OPENSUSE-SU-2022_0283-1

OPENSUSE-SU-2024:11807-1

RHSA-2022:1756

RHSA-2022:2074

RHSA-2022_2074

RLSA-2022:2074

SUSE-SU-2022:0283-1

SUSE-SU-2022:0323-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Red Hat

Red Os

Rocky Linux

Samba

Suse

References · 98

• 🔥 https://github.com/horizon3ai/CVE-2021-44142 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2021-44141 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-44141 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44141 · Security Note
• https://osv.dev/vulnerability/RLSA-2022:2074 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-8610 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0054.html · Security Note
• https://cve.org/CVERecord?id=CVE-2021-44141 · Security Note
• https://errata.rockylinux.org/RLSA-2022:2074 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5260-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-00685 · Security Note
• https://osv.dev/vulnerability/OESA-2022-1770 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0283-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-44141 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2022:0283-1 · Vendor Advisory