A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Mar 26, 2024 | Oct 12, 2021 |
| Debian | — | Upgrade heimdalUpgrade samba | Nov 24, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-clientUpgrade samba-winbind-clientsUpgrade sambaUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade libwbclient | Feb 28, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade libsmbclientUpgrade samba-pythonUpgrade sambaUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-client | Feb 24, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbindUpgrade samba-client-libsUpgrade samba-clientUpgrade libwbclientUpgrade samba-libsUpgrade sambaUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-common | Mar 2, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sambaUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-clientUpgrade libwbclient | Jan 28, 2022 | Oct 12, 2021 |
| Suse | — | Upgrade libgssapi3Upgrade libhdb9Upgrade libhcrypto4Upgrade libkdc2Upgrade libheimedit0Upgrade libkadm5clnt7Upgrade libsl0Upgrade libkrb5-26Upgrade libkafs0Upgrade libhx509-5Upgrade libheimntlm0Upgrade libotp0Upgrade libasn1-8Upgrade libwind0Upgrade libkadm5srv8Upgrade libroken18Upgrade libheimbase1Upgrade libheimdal-devel | Jan 17, 2023 | Oct 12, 2021 |
| Ubuntu | — | Upgrade libkdc2-heimdalUpgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade heimdal-clients (Ubuntu Pro)Upgrade libkdc2-heimdal (Ubuntu Pro)Upgrade heimdal-clientsUpgrade heimdal-clients-x (Ubuntu Pro)Upgrade sambaUpgrade heimdal-servers-x (Ubuntu Pro)Upgrade heimdal-servers (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade heimdal-kdcUpgrade libgssapi3-heimdalUpgrade heimdal-kcm (Ubuntu Pro)Upgrade heimdal-serversUpgrade heimdal-kcmUpgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade heimdal-kdc (Ubuntu Pro) | Nov 12, 2021 | Oct 12, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub