A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade heimdalUpgrade samba | Mar 26, 2024 | Oct 12, 2021 |
| Debian | — | Upgrade sambaUpgrade heimdal | Nov 24, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwbclientUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-winbindUpgrade sambaUpgrade samba-common-tools | Feb 28, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp3 | — | Upgrade sambaUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-pythonUpgrade libsmbclientUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-clientUpgrade libwbclientUpgrade samba-common-tools | Feb 24, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-commonUpgrade samba-pythonUpgrade samba-common-libsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade sambaUpgrade samba-libsUpgrade samba-winbindUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade libwbclient | Mar 2, 2022 | Oct 12, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-clientUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbindUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbind-clients | Jan 28, 2022 | Oct 12, 2021 |
| Suse | — | Upgrade libkdc2Upgrade libkadm5clnt7Upgrade libkafs0Upgrade libheimedit0Upgrade libgssapi3Upgrade libkrb5-26Upgrade libhdb9Upgrade libsl0Upgrade libhx509-5Upgrade libhcrypto4Upgrade libasn1-8Upgrade libheimdal-develUpgrade libkadm5srv8Upgrade libwind0Upgrade libheimntlm0Upgrade libheimbase1Upgrade libroken18Upgrade libotp0 | Jan 17, 2023 | Oct 12, 2021 |
| Ubuntu | — | Upgrade heimdal-clients (Ubuntu Pro)Upgrade heimdal-servers-x (Ubuntu Pro)Upgrade heimdal-clients-x (Ubuntu Pro)Upgrade heimdal-clientsUpgrade libkdc2-heimdalUpgrade libgssapi3-heimdal (Ubuntu Pro)Upgrade heimdal-kdcUpgrade heimdal-servers (Ubuntu Pro)Upgrade libkrb5-26-heimdalUpgrade libkdc2-heimdal (Ubuntu Pro)Upgrade sambaUpgrade heimdal-kcm (Ubuntu Pro)Upgrade heimdal-serversUpgrade heimdal-kdc (Ubuntu Pro)Upgrade heimdal-kcmUpgrade libkrb5-26-heimdal (Ubuntu Pro)Upgrade libgssapi3-heimdal | Nov 12, 2021 | Oct 12, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub