CVE:CVE-2021-3670
CNNVD:CNNVD-202205-2678
Samba是用于 Linux 和 Unix 的标准 Windows 互操作性程序套件。
Samba ldb 存在安全漏洞，该漏洞源于 LDAP Server MaxQueryDuration 值不被执行。攻击者利用该漏洞可以通过 LDAP Server MaxQueryDuration 触发 ldb 过载，从而触发拒绝服务。以下产品和版本受到影响：SUSE Enterprise Storage 7.1、SUSE Linux Enterprise Desktop 15-SP3、SUSE Linux Enterprise High Performance Computing 15-SP3、SUSE Linux Enterprise Micro 5.1、SUSE Linux Enterprise Micro 5.2、SUSE Linux Enterprise Module for Basesystem 15-SP3、SUSE Linux Enterprise Server 15-SP3、SUSE Linux Enterprise Server for SAP Applications 15-SP3、SUSE Manager Proxy 4.2、SUSE Manager Server 4.2、openSUSE Leap 15.3。
solution:samba samba avoid the version [4.1.0,); Upgrade redhat storage to a higher version than 3.0,and avoid the version 3.0; Upgrade fedoraproject fedora to a higher version than 35,and avoid the version 35