Name: CVE-2021-20251: Concurrent Execution using Shared Resource with Improper Synchronization
Creator: Rapid7
Published: 2023-03-06T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2021-20251, CWE-362, CVSS 5.9, EPSS 0.00758

A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.

CVSS Details

CVSS 3.1 Base Score: 5.9
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade samba	Jul 30, 2024	Mar 6, 2023
Gentoo Linux	—	Upgrade net-fs/samba.	Sep 18, 2023	Mar 6, 2023
Huawei Euleros 2_0_sp11	—	Upgrade samba-commonUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-winbind	Jul 5, 2023	Mar 6, 2023
Suse	—	Upgrade libsmbldap2-32bitUpgrade libsamba-hostconfig0-32bitUpgrade samba-clientUpgrade libsmbldap0-32bitUpgrade samba-ad-dc-libs-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-policy0-python3Upgrade libnetapi0Upgrade libsamba-credentials-develUpgrade samba-cephUpgrade samba-libs-python3Upgrade samba-libsUpgrade libsmbclient-develUpgrade libsamba-hostconfig0Upgrade libwbclient0-32bitUpgrade libndr-nbt0Upgrade samba-core-develUpgrade libdcerpc0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade libtevent-util-develUpgrade libdcerpc-binding0Upgrade samba-ad-dcUpgrade samba-winbind-libsUpgrade libwbclient-develUpgrade libsamba-credentials0-32bitUpgrade libtevent-util0Upgrade samba-winbind-32bitUpgrade libsmbclient0-32bitUpgrade libdcerpc-develUpgrade samba-ad-dc-libsUpgrade sambaUpgrade libdcerpc-samr-develUpgrade libndr-nbt-develUpgrade libsamba-util-develUpgrade libndr-krb5pac0-32bitUpgrade libsamba-errors0Upgrade samba-libs-32bitUpgrade libsamdb0Upgrade samba-winbindUpgrade libsamba-util0Upgrade libtevent-util0-32bitUpgrade samba-pythonUpgrade ctdbUpgrade libsmbclient0Upgrade samba-develUpgrade samba-python3Upgrade libwbclient0Upgrade samba-toolUpgrade samba-docUpgrade libsmbldap2Upgrade ctdb-pcp-pmdaUpgrade libsamba-policy-develUpgrade libndr0-32bitUpgrade libsmbldap0Upgrade libndr-nbt0-32bitUpgrade libsmbconf-develUpgrade samba-client-libsUpgrade libsamba-util0-32bitUpgrade libsamba-policy-python-develUpgrade libndr-standard-develUpgrade samba-client-32bitUpgrade libdcerpc-samr0Upgrade samba-libs-python-32bitUpgrade samba-libs-pythonUpgrade libndr-standard0-32bitUpgrade libndr-standard0Upgrade samba-devel-32bitUpgrade libsamba-hostconfig-develUpgrade libsamdb0-32bitUpgrade samba-testUpgrade libsamba-credentials0Upgrade libnetapi-develUpgrade libnetapi0-32bitUpgrade libsamba-policy0Upgrade samba-libs-python3-32bitUpgrade libsamba-errors-develUpgrade libndr-develUpgrade libndr-krb5pac0Upgrade libsamba-policy-python3-develUpgrade libsmbconf0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-passdb0Upgrade samba-client-libs-32bitUpgrade samba-ldb-ldapUpgrade libsamba-policy0-32bitUpgrade libndr0Upgrade libsmbconf0Upgrade libsamba-passdb-develUpgrade libdcerpc0Upgrade libsmbldap-develUpgrade samba-winbind-libs-32bitUpgrade libdcerpc-binding0-32bitUpgrade libndr-krb5pac-develUpgrade samba-gpupdateUpgrade samba-dsdb-modulesUpgrade libsamdb-devel	Aug 9, 2024	Mar 6, 2023
Ubuntu	—	Upgrade samba	Jan 25, 2023	Jan 23, 2023

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence