Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2021-23192 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
Alpine:v3.20samba4.12.7-r0, 4.8.8-r0, 4.8.7-r0
Alpine:v3.22samba0, 4.8.8-r0, 4.8.7-r0
Alpine:v3.21samba0, 4.8.8-r0, 4.8.7-r0
Alpine:v3.18samba0, 4.8.8-r0, 4.8.7-r0
Alpine:v3.19samba3.6.8-r1, 0, 3.2.10-r0
Alpine:v3.15samba4.8.7-r0, 4.8.5-r0, 4.8.4-r1
Alpine:v3.16samba3.2.10-r0, 3.6.6-r0, 4.1.1-r0
Alpine:v3.23samba3.6.1-r0, 3.2.10-r0, 3.2.11-r0
Alpine:v3.14samba0, 4.8.8-r0, 4.8.7-r0
Alpine:v3.17samba3.2.8-r1, 4.13.2-r1, 4.15.1-r1
Alpine:v3.13samba4.8.8-r0, 4.8.7-r0, 4.8.5-r0

Timeline

References

Open in Interactive Console →