Published on: 04 February 2022
Samba released security updates to address multiple vulnerabilities in Samba. For information about the vulnerabilities and the attacking vectors, please refer to the corresponding security advisories at the vendor's website.
Reports indicate that the out-of-bounds heap read/write vulnerability (CVE-2021-44142) is at high risk of exploitation and affects widely used Linux distributions such as RedHat, SUSE, and Ubuntu. A remote attacker may leverage the vulnerability to execute arbitrary code as root on affected Samba installations that use the VFS module vfs_fruit. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Successful exploitation could lead to remote code execution, denial of service, information disclosure or spoofing on an affected system.
Software updates or patches for affected systems are now available. Administrators of affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.
The vulnerabilities are also fixed in some of the Linux distributions such as RedHat, SUSE, and Ubuntu. The following is only a sample list of Linux distributions that are affected. The list is not exhaustive and it is strongly recommended to consult the product vendors if the used Linux systems are affected. System administrators should check with their product vendors to confirm if their Linux systems are affected and the availability of patches, and if so, apply the patches or follow the recommendations provided by the product vendors to mitigate the risk.