Non évaluée
All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of...
CVE-2021-43566
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2021-43566 samba Corrigé dans: 4.13.17-r0
- Debian DEBIAN-CVE-2021-43566 samba Corrigé dans: 2:4.16.0+dfsg-2
Description d'origine La description telle que publiée par la source (souvent en anglais).
All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed.
Références
- advisory security.netapp.com
- patch samba.org
- report bugzilla.samba.org