5.9

CVE-2021-20251

Exploit
A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Samba Version >= 4.1.0 < 4.16.8
Samba ≫ Samba Version >= 4.17.0 < 4.17.4
Fedoraproject ≫ Fedora Version37
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.446
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://bugzilla.redhat.com/show_bug.cgi?id=1929800
Third Party Advisory
Issue Tracking
https://bugzilla.samba.org/show_bug.cgi?id=14611
Third Party Advisory
Exploit
Issue Tracking