6.8

CVE-2021-20316

A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Samba Version < 4.15.0
Debian ≫ Debian Linux Version 10.0
Debian ≫ Debian Linux Version 11.0
Redhat ≫ Virtualization Host Version 4.0
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux Aus Version 8.6
Redhat ≫ Enterprise Linux Eus Version 8.6
Redhat ≫ Enterprise Linux Tus Version 8.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.97% 0.592
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 1.6 5.2
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

https://security.gentoo.org/glsa/202309-06
https://access.redhat.com/security/cve/CVE-2021-20316
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2009673
Third Party Advisory
Issue Tracking
https://bugzilla.samba.org/show_bug.cgi?id=14842
Vendor Advisory
Issue Tracking
https://security-tracker.debian.org/tracker/CVE-2021-20316
Third Party Advisory
Mitigation
https://www.samba.org/samba/security/CVE-2021-20316.html
Vendor Advisory