Test ID:	1.3.6.1.4.1.25623.1.0.113941
Category:	General
Title:	Samba Unspecified Vulnerability (CVE-2021-3670)
Summary:	Samba is prone to an unspecified vulnerability.
Description:	Summary: Samba is prone to an unspecified vulnerability. Vulnerability Insight: LDAP search filters can be very complex, search filters are not limited to indexed attributes and they can also include complex extended match rules like LDAP_MATCHING_RULE_IN_CHAIN. The LDAP Policy setting 'lDAPAdminLimits: MaxQueryDuration=120' (by default) should have provided a generous upper bound, however the policy was previously not considered in setting the timeout. Additionally, no interruption points were set in the filter handling to check if the operation was over-time. Affected Software/OS: Samba version 4.1.0 through 4.14.12 and 4.15.x through 4.15.5. Solution: Update to version 4.14.13, 4.15.6 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3670 https://security.gentoo.org/glsa/202309-06 https://bugzilla.redhat.com/show_bug.cgi?id=2077533 https://bugzilla.samba.org/show_bug.cgi?id=14694 https://gitlab.com/samba-team/samba/-/commit/1d5b155619bc532c46932965b215bd73a920e56f https://gitlab.com/samba-team/samba/-/commit/2b3af3b560c9617a233c131376c870fce146c002 https://gitlab.com/samba-team/samba/-/commit/3507e96b3dcf0c0b8eff7b2c08ffccaf0812a393 https://gitlab.com/samba-team/samba/-/commit/5f0590362c5c0c5ee20503a67467f9be2d50e73b https://gitlab.com/samba-team/samba/-/commit/86fe9d48883f87c928bf31ccbd275db420386803 https://gitlab.com/samba-team/samba/-/commit/dcfcafdbf756e12d9077ad7920eea25478c29f81 https://gitlab.com/samba-team/samba/-/commit/e1ab0c43629686d1d2c0b0b2bcdc90057a792049
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.