CVE-2021-20254
05.05.2021, 14:15
A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity.Enginsight
| Vendor | Product | Version |
|---|---|---|
| samba | samba | 3.6.0 ≤ 𝑥 < 4.12.15 |
| samba | samba | 4.13.0 ≤ 𝑥 < 4.13.8 |
| samba | samba | 4.14.0 ≤ 𝑥 < 4.14.4 |
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| samba |
|
Common Weakness Enumeration
References