Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2021-3671 →
DEBIAN-CVE-2021-3671
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authent...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
heimdal
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-3"}]}]
Debian:13
heimdal
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-3"}]}]
Debian:14
heimdal
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-3"}]}]
Debian:12
samba
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.13+dfsg-1"}]}]
Debian:13
samba
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.13+dfsg-1"}]}]
Debian:14
samba
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.13+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org