CVE:CVE-2021-3671
CNNVD:CNNVD-202110-906
Samba是用于 Linux 和 Unix 的标准 Windows 互操作性程序套件。
Samba存在代码问题漏洞，该漏洞源于在Samba Kerberos服务器处理TGS-REQ (Ticket Granting server - Request)中丢失sname的方式中存在空指针引用。经过身份验证的用户可以使用此漏洞使amba服务器崩溃。
solution:Upgrade samba samba to a higher version than 4.13.12,4.14.8,and avoid the version (,4.13.12),[4.14.0,4.14.8); Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade netapp management_services_for_element_software to a higher version than -; Upgrade netapp management_services_for_netapp_hci to a higher version than -; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -