CVE Vulnerability

CVE-2021-20316

A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.

6.8 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.samba.org/samba/security/CVE-2021-20316.html Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2009673 Issue Tracking Third Party Advisory
https://access.redhat.com/security/cve/CVE-2021-20316 Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2021-20316 Mitigation Third Party Advisory
https://bugzilla.samba.org/show_bug.cgi?id=14842 Issue Tracking Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_tus:8.6:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_aus:8.6:*:*:*:*:*:*:*
Information

Published : 2022-08-23 04:15

Updated : 2022-08-26 06:05

NVD link : CVE-2021-20316

Mitre link : CVE-2021-20316

Products Affected

Redhat

Virtualization Host

CWE
CWE-362