Description
A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a samba
Affects samba file server before v4.15.0, Fixed in samba v4.15.0affected
References
- https://bugzilla.samba.org/show_bug.cgi?id=14842 ↗
- https://www.samba.org/samba/security/CVE-2021-20316.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2009673 ↗
- https://access.redhat.com/security/cve/CVE-2021-20316 ↗
- https://security-tracker.debian.org/tracker/CVE-2021-20316 ↗
- https://security.gentoo.org/glsa/202309-06 ↗