{"uuid": "8c7fffb7-ed79-4939-a1c9-1ac45baa56f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44142", "type": "seen", "source": "https://t.me/hacking_Attack/41226", "content": "Exploit Collector\nSamba VFS Heap Out-Of-Bounds Read / Write\n\nhttps://4.bp.blogspot.com/-IV-83q7tlNU/WWlvNru3JHI/AAAAAAAAIMg/qWmIdM50sJs0a5mqLHfeVDVNkTKQ10wJwCLcBGAs/s1600/h23.png \nAll versions of Samba prior to 4.13.17 are vulnerable to an out-of-bounds heap read write vulnerability that allows remote attackers to execute arbitrary code as root on affected Samba installations that use the VFS module vfs_fruit.\n\nMD5 | 06fcbc7e0777b32c642d00aaeef26159\n\nDownload\n=================================================================\n== Subject:     Out-of-bounds heap read/write vulnerability\n==              in VFS module vfs_fruit allows code execution\n==\n== CVE ID#:     CVE-2021-44142\n==\n== Versions:    All versions of Samba prior to 4.13.17\n==\n== Summary:     This vulnerability allows remote attackers to\n==              execute arbitrary code as root on affected Samba\n==              installations that use the VFS module vfs_fruit.\n=================================================================\n\n===========\nDescription\n===========\n\nAll versions of Samba prior to 4.13.17 are vulnerable to an\nout-of-bounds heap read write vulnerability that allows remote\nattackers to execute arbitrary code as root on affected Samba\ninstallations that use the VFS module vfs_fruit.\n\nThe specific flaw exists within the parsing of EA metadata when\nopening files in smbd. Access as a user that has write access to a\nfile's extended attributes is required to exploit this\nvulnerability. Note that this could be a guest or unauthenticated user\nif such users are allowed write access to file extended attributes.\n\nThe problem in vfs_fruit exists in the default configuration of the\nfruit VFS module using fruit:metadata=netatalk or fruit:resource=file.\nIf both options are set to different settings than the default values,\nthe system is not affected by the security issue.\n\n==================\nPatch Availability\n==================\n\nPatches addressing both these issues have been posted to:\n\nhttps://www.samba.org/samba/security/\n\nAdditionally, Samba 4.13.17, 4.14.12 and 4.15.5 have been issued as\nsecurity releases to correct the defect. Samba administrators are\nadvised to upgrade to these releases or apply the patch as soon\nas possible.\n\n==================\nCVSSv3 calculation\n==================\n\nCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C\n\nBase score 9.9.\n\n==========\nWorkaround\n==========\n\nAs a workaround remove the \"fruit\" VFS module from the list of\nconfigured VFS objects in any \"vfs objects\" line in the Samba\nconfiguration smb.conf.\n\nNote that changing the VFS module settings fruit:metadata or\nfruit:resource to use the unaffected setting causes all stored\ninformation to be inaccessible and will make it appear to macOS\nclients as if the information is lost.\n=======\nCredits\n=======\n\nOriginally reported by Orange Tsai from DEVCORE.\n\nPatches provided by Ralph B\u00f6hme of the Samba team.\n\n==========================================================\n== Our Code, Our Bugs, Our Responsibility.\n== The Samba Team\n==========================================================\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:57.256525Z"}