CVE:CVE-2021-44142
CNNVD:CNNVD-202201-2719
Samba是用于 Linux 和 Unix 的标准 Windows 互操作性程序套件。
Samba 存在安全漏洞，该漏洞源于在将用户提供的数据复制到固定长度的基于堆的缓冲区之前缺乏对长度的正确验证。攻击者可以利用此漏洞在 root 环境中执行代码。
solution:Upgrade samba samba to a higher version than 4.13.17,4.14.12,4.15.5,and avoid the version (,4.13.17),[4.14.0,4.14.12),[4.15.0,4.15.5); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,20.04,21.10,and avoid the version 14.04,16.04,18.04,20.04,21.10; Upgrade synology diskstation_manager to a higher version than 6.2.4-25556.4,and avoid the version [6.2,6.2.4-25556.4); Upgrade fedoraproject fedora to a higher version than 34,35,and avoid the version 34,35; Upgrade redhat codeready_linux_builder to a higher version than -; Upgrade redhat gluster_storage to a higher version than 3.5,and avoid the version 3.5; Upgrade redhat virtualization_host to a higher version than 4.0,and avoid the version 4.0; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_resilient_storage to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,8.1,and avoid the version 7.0,8.1; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.1,8.2,8.4,and avoid the version 8.1,8.2,8.4; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0