CVE-2021-20251
Summary
| CVE | CVE-2021-20251 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2023-03-06 23:15:00 UTC |
|---|
| Updated | 2023-09-17 09:15:00 UTC |
|---|
| Description | A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Bug Access Denied |
MISC |
bugzilla.redhat.com |
|
| 14611 – (CVE-2021-20251) CVE-2021-20251 [SECURITY] Bad password count not incremented atomically |
MISC |
bugzilla.samba.org |
|
| Samba: Multiple Vulnerabilities (GLSA 202309-06) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| CVE-2021-20251 Samba Vulnerability in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 183390 Debian Security Update for samba (CVE-2021-20251)
- 199130 Ubuntu Security Notification for Samba Vulnerabilities (USN-5822-1)
- 673134 EulerOS Security Update for samba (EulerOS-SA-2023-2300)
- 673159 EulerOS Security Update for samba (EulerOS-SA-2023-2276)
- 710751 Gentoo Linux Samba Multiple Vulnerabilities (GLSA 202309-06)
- 753558 SUSE Enterprise Linux Security Update for samba (SUSE-SU-2023:0126-1)
- 753569 SUSE Enterprise Linux Security Update for samba (SUSE-SU-2023:0163-1)
- 753573 SUSE Enterprise Linux Security Update for samba (SUSE-SU-2023:0164-1)
- 753581 SUSE Enterprise Linux Security Update for samba (SUSE-SU-2023:0162-1)
- 753587 SUSE Enterprise Linux Security Update for samba (SUSE-SU-2023:0160-1)
- 753611 SUSE Enterprise Linux Security Update for samba (SUSE-SU-2023:0222-1)
