{"id":103151,"date":"2022-01-31T21:36:52","date_gmt":"2022-01-31T19:36:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/udalyonnaya-root-uyazvimost-v-samba"},"modified":"2022-01-31T21:36:52","modified_gmt":"2022-01-31T19:36:52","slug":"udalyonnaya-root-uyazvimost-v-samba","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/udalyonnaya-root-uyazvimost-v-samba","title":{"rendered":"Remote root vulnerability in Samba","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Corrective releases for versions 4.15.5, 4.14.12, and 4.13.17 have been published to address three vulnerabilities. The most critical vulnerability (CVE-2021-44142) allows a remote attacker to execute arbitrary code with root privileges on systems running a vulnerable version of Samba. This issue has been assigned a severity level of 9.9 out of 10. <\/p>\n

The vulnerability appears only when using the VFS module vfs_fruit with default parameters (fruit:metadata=netatalk or fruit:resource=file), which provides an additional level of compatibility with macOS clients and enhances portability with files. servers<\/a> Netatalk 3 AFP. The issue is caused by a buffer overflow in the metadata parsing code for extended attributes (EA, xattr) triggered during file open operations in smbd. To exploit this vulnerability, a user must have write access to the file's extended attributes, although the attack can also be executed by a guest user if such write access is granted. <\/p>\n

You can track the release of package updates in the distributions on the following pages: Debian, Ubuntu, RHEL, SUSE, Fedora, Arch, FreeBSD. As a workaround for protection, you can remove the \"fruit\" module from the \"vfs objects\" list in smb.conf. <\/p>\n

The other two vulnerabilities: <\/p>\n