Skip to content
OpenAdvisories
Unscored CVE-2021-23192 EUVD-2021-10299GHSA-vffc-r23p-p6rq

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragme…

Published Mar 2, 2022 · Updated Aug 3, 2024 · Assigned by redhat

Package: samba Package: samba Package: samba Package: samba Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.

Affected products

VendorProductAffectedFixed
— samba Affects samba v4.10.0 to 4.15.1, Fixed in samba v4.15.2, v4.14.10 and v4.13.14. —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 samba 2:4.13.14+dfsg-1 —
Debian 13 samba 2:4.13.14+dfsg-1 —
Debian 12 samba 2:4.13.14+dfsg-1 —
Debian 11 samba 2:4.13.13+dfsg-1~deb11u2 DSA-5003-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS samba 2:4.13.14+dfsg-0ubuntu1 —
Ubuntu 20.04 LTS samba 2:4.13.14+dfsg-0ubuntu0.20.04.1 USN-5142-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 8 ctdb +24 4.14.5-7.el8_5 RHSA-2021:5082
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.4 EUS ctdb +24 4.13.3-8.el8_4 RHSA-2022:0008
Red Hat Gluster Storage 3 ctdb +20 4.14.5-204.el8rhgs RHSA-2021:4843

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 samba-devel +3 4.14.5-7.el8_5 ALSA-2021:5082

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 samba 4.14.5-7.el8_5 RLSA-2021:5082

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP3 ldb 2.2.2-3.3.1 SUSE-SU-2021:3647-1
SLES 15 SP3 samba 4.13.13+git.528.140935f8d6a-3.12.1 SUSE-SU-2021:3647-1
SLES 15 SP2 samba 4.11.14+git.308.666c63d4eea-4.28.1 SUSE-SU-2021:3650-1
SLES 12 SP5 samba 4.10.18+git.339.c912385a5e1-3.41.1 SUSE-SU-2021:3649-1
SLES 2 samba 4.11.14+git.308.666c63d4eea-4.28.1 SUSE-SU-2021:3650-1, SUSE-SU-2021:3647-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP5 samba 4.10.18+git.339.c912385a5e1-3.41.1 SUSE-SU-2021:3649-1
SLE Micro 5.1 ldb 2.2.2-3.3.1 SUSE-SU-2021:3647-1
SUSE Enterprise Storage 7 ldb 2.2.2-4.6.1 SUSE-SU-2022:0361-1
SUSE Enterprise Storage 7 samba 4.13.13+git.545.5897c2d94f3-3.12.1 SUSE-SU-2022:0361-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed samba 4.15.2+git.193.a4d6307f1fd-1.1 openSUSE-SU-2024:11631-1
openSUSE Leap 15.3 ldb 2.2.2-3.3.1 openSUSE-SU-2021:3647-1
openSUSE Leap 15.3 samba 4.11.14+git.308.666c63d4eea-4.28.1 openSUSE-SU-2021:3650-1, openSUSE-SU-2021:3647-1
openSUSE Leap 15.2 samba 4.11.14+git.308.666c63d4eea-lp152.3.28.1 openSUSE-SU-2021:1471-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 samba 4.15.2-r0 —
Alpine v3.23 samba 4.15.2-r0 —
Alpine v3.22 samba 4.15.2-r0 —
Alpine v3.21 samba 4.15.2-r0 —
Alpine v3.20 samba 4.15.2-r0 —
Show 7 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 samba 4.15.2-r0 —
Alpine v3.18 samba 4.15.2-r0 —
Alpine v3.17 samba 4.15.2-r0 —
Alpine v3.16 samba 4.15.2-r0 —
Alpine v3.15 samba 4.15.2-r0 —
Alpine v3.14 samba 4.14.12-r0 —
Alpine v3.13 samba 4.13.17-r0 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 samba 4.18.3-1 —
Azure Linux 2 (CBL-Mariner) samba No fix yet —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 ctdb +24 4.14.5-7.el8_5 ELSA-2021-5082

Advisories 19

References