CVE-2021-3671
Medium
Description
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Samba
PublishedOct 12, 2021
First seenOct 12, 2021
Weakness typeCWE-476NULL pointer dereference
How to fix
Update
- samba samba4.13.12, 4.14.8 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| samba samba | v < 4.13.12, 4.14.0 ≤ v < 4.14.8 | 4.13.12, 4.14.8 |
| debian debian_linux | 10.0, 11.0 | — |
| netapp management_services_for_element_software | No range specified | — |
| netapp management_services_for_netapp_hci | No range specified | — |
| netapp ontap_select_deploy_administration_utility | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.