CVE-2021-44141

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type

GIT

Repo

https://github.com/samba-team/samba

Events

Introduced

Fixed

27bd8a323591486e76e916a6084c7300bf358eec

Introduced

Last affected

4fba936a8ab9afbdb7eaf2789d57850fbec35a77

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.15.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0"
        }
    ]
}

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "34"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "35"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-44141.json"