vulnerability

Samba CVE-2021-44141: CVE-2021-44141, CVE-2021-44142 and CVE-2022-0336. Please see announcements for details.

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:S/C:P/I:N/A:N)

Published

Feb 21, 2022

Added

Mar 9, 2022

Modified

Mar 27, 2026

Description

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

Solution

samba-upgrade-4_15_5

References

CVE-2021-44141
https://attackerkb.com/topics/CVE-2021-44141
CWE-200
CWE-59
EUVD-EUVD-2021-30994
http://www.samba.org/samba/security/CVE-2021-44141.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-30994

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report