SUSE update for samba

1) Buffer overflow

EUVDB-ID: #VU48944

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2020-29361

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a unspecified boundary error, related to processing of RPC requests. A remote attacker can perform a denial of service (DoS) attack.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP Applications: 12-SP3 - 12-SP5

SUSE Linux Enterprise High Performance Computing: 12-SP5

SUSE Linux Enterprise High Availability: 12-SP5

SUSE Linux Enterprise Server: 12-SP3 - 12-SP5

SUSE Linux Enterprise Desktop: 12-SP5

SUSE Linux Enterprise Software Development Kit: 12-SP5

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

ctdb: before 4.15.4+git.324.8332acf1a63-3.54.1

yast2-samba-client: before 3.1.23-3.3.1

samba-doc: before 4.15.4+git.324.8332acf1a63-3.54.1

ca-certificates: before 1_201403302107-15.3.3

apparmor-utils: before 2.8.2-56.6.3

apparmor-profiles: before 2.8.2-56.6.3

apparmor-docs: before 2.8.2-56.6.3

samba-winbind-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

pam_apparmor-debuginfo-32bit: before 2.8.2-56.6.3

pam_apparmor-32bit: before 2.8.2-56.6.3

p11-kit-debuginfo-32bit: before 0.23.2-8.3.2

p11-kit-32bit: before 0.23.2-8.3.2

libsamba-policy0-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo-32bit: before 0.23.2-8.3.2

libp11-kit0-32bit: before 0.23.2-8.3.2

libnettle6-debuginfo-32bit: before 3.1-21.3.2

libnettle6-32bit: before 3.1-21.3.2

libhogweed4-debuginfo-32bit: before 3.1-21.3.2

libhogweed4-32bit: before 3.1-21.3.2

libgnutls30-debuginfo-32bit: before 3.4.17-8.4.1

libgnutls30-32bit: before 3.4.17-8.4.1

libapparmor1-debuginfo-32bit: before 2.8.2-56.6.3

libapparmor1-32bit: before 2.8.2-56.6.3

pam_apparmor-debuginfo: before 2.8.2-56.6.3

libnettle-debugsource: before 3.1-21.3.2

gnutls-debugsource: before 3.4.17-8.4.1

sssd-tools-debuginfo: before 1.16.1-7.28.9

sssd-tools: before 1.16.1-7.28.9

sssd-proxy-debuginfo: before 1.16.1-7.28.9

sssd-proxy: before 1.16.1-7.28.9

sssd-ldap-debuginfo: before 1.16.1-7.28.9

sssd-ldap: before 1.16.1-7.28.9

sssd-krb5-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common: before 1.16.1-7.28.9

sssd-krb5: before 1.16.1-7.28.9

sssd-ipa-debuginfo: before 1.16.1-7.28.9

sssd-ipa: before 1.16.1-7.28.9

sssd-dbus-debuginfo: before 1.16.1-7.28.9

sssd-dbus: before 1.16.1-7.28.9

sssd-common-debuginfo: before 1.16.1-7.28.9

sssd-common: before 1.16.1-7.28.9

sssd-ad-debuginfo: before 1.16.1-7.28.9

sssd-ad: before 1.16.1-7.28.9

sssd: before 1.16.1-7.28.9

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-tool: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client: before 4.15.4+git.324.8332acf1a63-3.54.1

samba: before 4.15.4+git.324.8332acf1a63-3.54.1

python-sssd-config-debuginfo: before 1.16.1-7.28.9

python-sssd-config: before 1.16.1-7.28.9

perl-apparmor-debuginfo: before 2.8.2-56.6.3

perl-apparmor: before 2.8.2-56.6.3

pam_apparmor: before 2.8.2-56.6.3

p11-kit-tools-debuginfo: before 0.23.2-8.3.2

p11-kit-tools: before 0.23.2-8.3.2

p11-kit-nss-trust: before 0.23.2-8.3.2

p11-kit: before 0.23.2-8.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-7.28.9

libsss_simpleifp0: before 1.16.1-7.28.9

libsss_nss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_nss_idmap0: before 1.16.1-7.28.9

libsss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_idmap0: before 1.16.1-7.28.9

libsss_certmap0-debuginfo: before 1.16.1-7.28.9

libsss_certmap0: before 1.16.1-7.28.9

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo: before 0.23.2-8.3.2

libp11-kit0: before 0.23.2-8.3.2

libnettle6-debuginfo: before 3.1-21.3.2

libnettle6: before 3.1-21.3.2

libipa_hbac0-debuginfo: before 1.16.1-7.28.9

libipa_hbac0: before 1.16.1-7.28.9

libhogweed4-debuginfo: before 3.1-21.3.2

libhogweed4: before 3.1-21.3.2

libgnutls30-debuginfo: before 3.4.17-8.4.1

libgnutls30: before 3.4.17-8.4.1

libapparmor1-debuginfo: before 2.8.2-56.6.3

libapparmor1: before 2.8.2-56.6.3

apparmor-parser-debuginfo: before 2.8.2-56.6.3

apparmor-parser: before 2.8.2-56.6.3

apache2-mod_apparmor-debuginfo: before 2.8.2-56.6.3

apache2-mod_apparmor: before 2.8.2-56.6.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

sssd-debugsource: before 1.16.1-7.28.9

samba-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debugsource: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

p11-kit-devel: before 0.23.2-8.3.2

p11-kit-debugsource: before 0.23.2-8.3.2

p11-kit-debuginfo: before 0.23.2-8.3.2

libsss_nss_idmap-devel: before 1.16.1-7.28.9

libsss_idmap-devel: before 1.16.1-7.28.9

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libipa_hbac-devel: before 1.16.1-7.28.9

libapparmor-devel: before 2.8.2-56.6.3

apparmor-debugsource: before 2.8.2-56.6.3

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:yast2-samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ca-certificates:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gnutls-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-nss-trust:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220323-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Race condition

EUVDB-ID: #VU78991

Risk: Low

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-20316

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to a race condition. A remote user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP Applications: 12-SP3 - 12-SP5

SUSE Linux Enterprise High Performance Computing: 12-SP5

SUSE Linux Enterprise High Availability: 12-SP5

SUSE Linux Enterprise Server: 12-SP3 - 12-SP5

SUSE Linux Enterprise Desktop: 12-SP5

SUSE Linux Enterprise Software Development Kit: 12-SP5

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

ctdb: before 4.15.4+git.324.8332acf1a63-3.54.1

yast2-samba-client: before 3.1.23-3.3.1

samba-doc: before 4.15.4+git.324.8332acf1a63-3.54.1

ca-certificates: before 1_201403302107-15.3.3

apparmor-utils: before 2.8.2-56.6.3

apparmor-profiles: before 2.8.2-56.6.3

apparmor-docs: before 2.8.2-56.6.3

samba-winbind-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

pam_apparmor-debuginfo-32bit: before 2.8.2-56.6.3

pam_apparmor-32bit: before 2.8.2-56.6.3

p11-kit-debuginfo-32bit: before 0.23.2-8.3.2

p11-kit-32bit: before 0.23.2-8.3.2

libsamba-policy0-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo-32bit: before 0.23.2-8.3.2

libp11-kit0-32bit: before 0.23.2-8.3.2

libnettle6-debuginfo-32bit: before 3.1-21.3.2

libnettle6-32bit: before 3.1-21.3.2

libhogweed4-debuginfo-32bit: before 3.1-21.3.2

libhogweed4-32bit: before 3.1-21.3.2

libgnutls30-debuginfo-32bit: before 3.4.17-8.4.1

libgnutls30-32bit: before 3.4.17-8.4.1

libapparmor1-debuginfo-32bit: before 2.8.2-56.6.3

libapparmor1-32bit: before 2.8.2-56.6.3

pam_apparmor-debuginfo: before 2.8.2-56.6.3

libnettle-debugsource: before 3.1-21.3.2

gnutls-debugsource: before 3.4.17-8.4.1

sssd-tools-debuginfo: before 1.16.1-7.28.9

sssd-tools: before 1.16.1-7.28.9

sssd-proxy-debuginfo: before 1.16.1-7.28.9

sssd-proxy: before 1.16.1-7.28.9

sssd-ldap-debuginfo: before 1.16.1-7.28.9

sssd-ldap: before 1.16.1-7.28.9

sssd-krb5-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common: before 1.16.1-7.28.9

sssd-krb5: before 1.16.1-7.28.9

sssd-ipa-debuginfo: before 1.16.1-7.28.9

sssd-ipa: before 1.16.1-7.28.9

sssd-dbus-debuginfo: before 1.16.1-7.28.9

sssd-dbus: before 1.16.1-7.28.9

sssd-common-debuginfo: before 1.16.1-7.28.9

sssd-common: before 1.16.1-7.28.9

sssd-ad-debuginfo: before 1.16.1-7.28.9

sssd-ad: before 1.16.1-7.28.9

sssd: before 1.16.1-7.28.9

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-tool: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client: before 4.15.4+git.324.8332acf1a63-3.54.1

samba: before 4.15.4+git.324.8332acf1a63-3.54.1

python-sssd-config-debuginfo: before 1.16.1-7.28.9

python-sssd-config: before 1.16.1-7.28.9

perl-apparmor-debuginfo: before 2.8.2-56.6.3

perl-apparmor: before 2.8.2-56.6.3

pam_apparmor: before 2.8.2-56.6.3

p11-kit-tools-debuginfo: before 0.23.2-8.3.2

p11-kit-tools: before 0.23.2-8.3.2

p11-kit-nss-trust: before 0.23.2-8.3.2

p11-kit: before 0.23.2-8.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-7.28.9

libsss_simpleifp0: before 1.16.1-7.28.9

libsss_nss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_nss_idmap0: before 1.16.1-7.28.9

libsss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_idmap0: before 1.16.1-7.28.9

libsss_certmap0-debuginfo: before 1.16.1-7.28.9

libsss_certmap0: before 1.16.1-7.28.9

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo: before 0.23.2-8.3.2

libp11-kit0: before 0.23.2-8.3.2

libnettle6-debuginfo: before 3.1-21.3.2

libnettle6: before 3.1-21.3.2

libipa_hbac0-debuginfo: before 1.16.1-7.28.9

libipa_hbac0: before 1.16.1-7.28.9

libhogweed4-debuginfo: before 3.1-21.3.2

libhogweed4: before 3.1-21.3.2

libgnutls30-debuginfo: before 3.4.17-8.4.1

libgnutls30: before 3.4.17-8.4.1

libapparmor1-debuginfo: before 2.8.2-56.6.3

libapparmor1: before 2.8.2-56.6.3

apparmor-parser-debuginfo: before 2.8.2-56.6.3

apparmor-parser: before 2.8.2-56.6.3

apache2-mod_apparmor-debuginfo: before 2.8.2-56.6.3

apache2-mod_apparmor: before 2.8.2-56.6.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

sssd-debugsource: before 1.16.1-7.28.9

samba-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debugsource: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

p11-kit-devel: before 0.23.2-8.3.2

p11-kit-debugsource: before 0.23.2-8.3.2

p11-kit-debuginfo: before 0.23.2-8.3.2

libsss_nss_idmap-devel: before 1.16.1-7.28.9

libsss_idmap-devel: before 1.16.1-7.28.9

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libipa_hbac-devel: before 1.16.1-7.28.9

libapparmor-devel: before 2.8.2-56.6.3

apparmor-debugsource: before 2.8.2-56.6.3

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:yast2-samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ca-certificates:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gnutls-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-nss-trust:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220323-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Link following

EUVDB-ID: #VU59345

Risk: Low

CVSSv4.0: 0.5 [CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-43566

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Exploit availability: No

Description

The vulnerability allows a remote user to bypass implemented security restrictions.

The vulnerability exists due to a symlink race condition when creating directories. A remote authenticated user can use SMB1 or NFS symlink race to create directories on the Unix filesystem outside of the share definition.

Successful exploitation of the vulnerability requites that the user has permissions to create folder in the target directory.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP Applications: 12-SP3 - 12-SP5

SUSE Linux Enterprise High Performance Computing: 12-SP5

SUSE Linux Enterprise High Availability: 12-SP5

SUSE Linux Enterprise Server: 12-SP3 - 12-SP5

SUSE Linux Enterprise Desktop: 12-SP5

SUSE Linux Enterprise Software Development Kit: 12-SP5

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

ctdb: before 4.15.4+git.324.8332acf1a63-3.54.1

yast2-samba-client: before 3.1.23-3.3.1

samba-doc: before 4.15.4+git.324.8332acf1a63-3.54.1

ca-certificates: before 1_201403302107-15.3.3

apparmor-utils: before 2.8.2-56.6.3

apparmor-profiles: before 2.8.2-56.6.3

apparmor-docs: before 2.8.2-56.6.3

samba-winbind-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

pam_apparmor-debuginfo-32bit: before 2.8.2-56.6.3

pam_apparmor-32bit: before 2.8.2-56.6.3

p11-kit-debuginfo-32bit: before 0.23.2-8.3.2

p11-kit-32bit: before 0.23.2-8.3.2

libsamba-policy0-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo-32bit: before 0.23.2-8.3.2

libp11-kit0-32bit: before 0.23.2-8.3.2

libnettle6-debuginfo-32bit: before 3.1-21.3.2

libnettle6-32bit: before 3.1-21.3.2

libhogweed4-debuginfo-32bit: before 3.1-21.3.2

libhogweed4-32bit: before 3.1-21.3.2

libgnutls30-debuginfo-32bit: before 3.4.17-8.4.1

libgnutls30-32bit: before 3.4.17-8.4.1

libapparmor1-debuginfo-32bit: before 2.8.2-56.6.3

libapparmor1-32bit: before 2.8.2-56.6.3

pam_apparmor-debuginfo: before 2.8.2-56.6.3

libnettle-debugsource: before 3.1-21.3.2

gnutls-debugsource: before 3.4.17-8.4.1

sssd-tools-debuginfo: before 1.16.1-7.28.9

sssd-tools: before 1.16.1-7.28.9

sssd-proxy-debuginfo: before 1.16.1-7.28.9

sssd-proxy: before 1.16.1-7.28.9

sssd-ldap-debuginfo: before 1.16.1-7.28.9

sssd-ldap: before 1.16.1-7.28.9

sssd-krb5-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common: before 1.16.1-7.28.9

sssd-krb5: before 1.16.1-7.28.9

sssd-ipa-debuginfo: before 1.16.1-7.28.9

sssd-ipa: before 1.16.1-7.28.9

sssd-dbus-debuginfo: before 1.16.1-7.28.9

sssd-dbus: before 1.16.1-7.28.9

sssd-common-debuginfo: before 1.16.1-7.28.9

sssd-common: before 1.16.1-7.28.9

sssd-ad-debuginfo: before 1.16.1-7.28.9

sssd-ad: before 1.16.1-7.28.9

sssd: before 1.16.1-7.28.9

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-tool: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client: before 4.15.4+git.324.8332acf1a63-3.54.1

samba: before 4.15.4+git.324.8332acf1a63-3.54.1

python-sssd-config-debuginfo: before 1.16.1-7.28.9

python-sssd-config: before 1.16.1-7.28.9

perl-apparmor-debuginfo: before 2.8.2-56.6.3

perl-apparmor: before 2.8.2-56.6.3

pam_apparmor: before 2.8.2-56.6.3

p11-kit-tools-debuginfo: before 0.23.2-8.3.2

p11-kit-tools: before 0.23.2-8.3.2

p11-kit-nss-trust: before 0.23.2-8.3.2

p11-kit: before 0.23.2-8.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-7.28.9

libsss_simpleifp0: before 1.16.1-7.28.9

libsss_nss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_nss_idmap0: before 1.16.1-7.28.9

libsss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_idmap0: before 1.16.1-7.28.9

libsss_certmap0-debuginfo: before 1.16.1-7.28.9

libsss_certmap0: before 1.16.1-7.28.9

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo: before 0.23.2-8.3.2

libp11-kit0: before 0.23.2-8.3.2

libnettle6-debuginfo: before 3.1-21.3.2

libnettle6: before 3.1-21.3.2

libipa_hbac0-debuginfo: before 1.16.1-7.28.9

libipa_hbac0: before 1.16.1-7.28.9

libhogweed4-debuginfo: before 3.1-21.3.2

libhogweed4: before 3.1-21.3.2

libgnutls30-debuginfo: before 3.4.17-8.4.1

libgnutls30: before 3.4.17-8.4.1

libapparmor1-debuginfo: before 2.8.2-56.6.3

libapparmor1: before 2.8.2-56.6.3

apparmor-parser-debuginfo: before 2.8.2-56.6.3

apparmor-parser: before 2.8.2-56.6.3

apache2-mod_apparmor-debuginfo: before 2.8.2-56.6.3

apache2-mod_apparmor: before 2.8.2-56.6.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

sssd-debugsource: before 1.16.1-7.28.9

samba-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debugsource: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

p11-kit-devel: before 0.23.2-8.3.2

p11-kit-debugsource: before 0.23.2-8.3.2

p11-kit-debuginfo: before 0.23.2-8.3.2

libsss_nss_idmap-devel: before 1.16.1-7.28.9

libsss_idmap-devel: before 1.16.1-7.28.9

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libipa_hbac-devel: before 1.16.1-7.28.9

libapparmor-devel: before 2.8.2-56.6.3

apparmor-debugsource: before 2.8.2-56.6.3

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:yast2-samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ca-certificates:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gnutls-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-nss-trust:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220323-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Link following

EUVDB-ID: #VU60187

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-44141

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

Exploit availability: No

Description

The vulnerability allows a remote user to gain access to sensitive information.

The vulnerability exists due to insecure link following. A remote user with ability to write files to the exported part of the file system under a share via SMB1 unix extensions or via NFS can create a symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP Applications: 12-SP3 - 12-SP5

SUSE Linux Enterprise High Performance Computing: 12-SP5

SUSE Linux Enterprise High Availability: 12-SP5

SUSE Linux Enterprise Server: 12-SP3 - 12-SP5

SUSE Linux Enterprise Desktop: 12-SP5

SUSE Linux Enterprise Software Development Kit: 12-SP5

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

ctdb: before 4.15.4+git.324.8332acf1a63-3.54.1

yast2-samba-client: before 3.1.23-3.3.1

samba-doc: before 4.15.4+git.324.8332acf1a63-3.54.1

ca-certificates: before 1_201403302107-15.3.3

apparmor-utils: before 2.8.2-56.6.3

apparmor-profiles: before 2.8.2-56.6.3

apparmor-docs: before 2.8.2-56.6.3

samba-winbind-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

pam_apparmor-debuginfo-32bit: before 2.8.2-56.6.3

pam_apparmor-32bit: before 2.8.2-56.6.3

p11-kit-debuginfo-32bit: before 0.23.2-8.3.2

p11-kit-32bit: before 0.23.2-8.3.2

libsamba-policy0-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo-32bit: before 0.23.2-8.3.2

libp11-kit0-32bit: before 0.23.2-8.3.2

libnettle6-debuginfo-32bit: before 3.1-21.3.2

libnettle6-32bit: before 3.1-21.3.2

libhogweed4-debuginfo-32bit: before 3.1-21.3.2

libhogweed4-32bit: before 3.1-21.3.2

libgnutls30-debuginfo-32bit: before 3.4.17-8.4.1

libgnutls30-32bit: before 3.4.17-8.4.1

libapparmor1-debuginfo-32bit: before 2.8.2-56.6.3

libapparmor1-32bit: before 2.8.2-56.6.3

pam_apparmor-debuginfo: before 2.8.2-56.6.3

libnettle-debugsource: before 3.1-21.3.2

gnutls-debugsource: before 3.4.17-8.4.1

sssd-tools-debuginfo: before 1.16.1-7.28.9

sssd-tools: before 1.16.1-7.28.9

sssd-proxy-debuginfo: before 1.16.1-7.28.9

sssd-proxy: before 1.16.1-7.28.9

sssd-ldap-debuginfo: before 1.16.1-7.28.9

sssd-ldap: before 1.16.1-7.28.9

sssd-krb5-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common: before 1.16.1-7.28.9

sssd-krb5: before 1.16.1-7.28.9

sssd-ipa-debuginfo: before 1.16.1-7.28.9

sssd-ipa: before 1.16.1-7.28.9

sssd-dbus-debuginfo: before 1.16.1-7.28.9

sssd-dbus: before 1.16.1-7.28.9

sssd-common-debuginfo: before 1.16.1-7.28.9

sssd-common: before 1.16.1-7.28.9

sssd-ad-debuginfo: before 1.16.1-7.28.9

sssd-ad: before 1.16.1-7.28.9

sssd: before 1.16.1-7.28.9

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-tool: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client: before 4.15.4+git.324.8332acf1a63-3.54.1

samba: before 4.15.4+git.324.8332acf1a63-3.54.1

python-sssd-config-debuginfo: before 1.16.1-7.28.9

python-sssd-config: before 1.16.1-7.28.9

perl-apparmor-debuginfo: before 2.8.2-56.6.3

perl-apparmor: before 2.8.2-56.6.3

pam_apparmor: before 2.8.2-56.6.3

p11-kit-tools-debuginfo: before 0.23.2-8.3.2

p11-kit-tools: before 0.23.2-8.3.2

p11-kit-nss-trust: before 0.23.2-8.3.2

p11-kit: before 0.23.2-8.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-7.28.9

libsss_simpleifp0: before 1.16.1-7.28.9

libsss_nss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_nss_idmap0: before 1.16.1-7.28.9

libsss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_idmap0: before 1.16.1-7.28.9

libsss_certmap0-debuginfo: before 1.16.1-7.28.9

libsss_certmap0: before 1.16.1-7.28.9

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo: before 0.23.2-8.3.2

libp11-kit0: before 0.23.2-8.3.2

libnettle6-debuginfo: before 3.1-21.3.2

libnettle6: before 3.1-21.3.2

libipa_hbac0-debuginfo: before 1.16.1-7.28.9

libipa_hbac0: before 1.16.1-7.28.9

libhogweed4-debuginfo: before 3.1-21.3.2

libhogweed4: before 3.1-21.3.2

libgnutls30-debuginfo: before 3.4.17-8.4.1

libgnutls30: before 3.4.17-8.4.1

libapparmor1-debuginfo: before 2.8.2-56.6.3

libapparmor1: before 2.8.2-56.6.3

apparmor-parser-debuginfo: before 2.8.2-56.6.3

apparmor-parser: before 2.8.2-56.6.3

apache2-mod_apparmor-debuginfo: before 2.8.2-56.6.3

apache2-mod_apparmor: before 2.8.2-56.6.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

sssd-debugsource: before 1.16.1-7.28.9

samba-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debugsource: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

p11-kit-devel: before 0.23.2-8.3.2

p11-kit-debugsource: before 0.23.2-8.3.2

p11-kit-debuginfo: before 0.23.2-8.3.2

libsss_nss_idmap-devel: before 1.16.1-7.28.9

libsss_idmap-devel: before 1.16.1-7.28.9

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libipa_hbac-devel: before 1.16.1-7.28.9

libapparmor-devel: before 2.8.2-56.6.3

apparmor-debugsource: before 2.8.2-56.6.3

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:yast2-samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ca-certificates:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gnutls-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-nss-trust:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220323-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Out-of-bounds write

EUVDB-ID: #VU60186

Risk: High

CVSSv4.0: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/U:Amber]

CVE-ID: CVE-2021-44142

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing EA metadata while opening files in smbd within the VFS Samba module (vfs_fruit). A remote attacker with ability to write to file's extended attributes can trigger an out-of-bounds write and execute arbitrary code with root privileges.

Note, the vulnerability in vfs_fruit exists in the default configuration of the fruit VFS module using fruit:metadata=netatalk or fruit:resource=file.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP Applications: 12-SP3 - 12-SP5

SUSE Linux Enterprise High Performance Computing: 12-SP5

SUSE Linux Enterprise High Availability: 12-SP5

SUSE Linux Enterprise Server: 12-SP3 - 12-SP5

SUSE Linux Enterprise Desktop: 12-SP5

SUSE Linux Enterprise Software Development Kit: 12-SP5

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

ctdb: before 4.15.4+git.324.8332acf1a63-3.54.1

yast2-samba-client: before 3.1.23-3.3.1

samba-doc: before 4.15.4+git.324.8332acf1a63-3.54.1

ca-certificates: before 1_201403302107-15.3.3

apparmor-utils: before 2.8.2-56.6.3

apparmor-profiles: before 2.8.2-56.6.3

apparmor-docs: before 2.8.2-56.6.3

samba-winbind-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

pam_apparmor-debuginfo-32bit: before 2.8.2-56.6.3

pam_apparmor-32bit: before 2.8.2-56.6.3

p11-kit-debuginfo-32bit: before 0.23.2-8.3.2

p11-kit-32bit: before 0.23.2-8.3.2

libsamba-policy0-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo-32bit: before 0.23.2-8.3.2

libp11-kit0-32bit: before 0.23.2-8.3.2

libnettle6-debuginfo-32bit: before 3.1-21.3.2

libnettle6-32bit: before 3.1-21.3.2

libhogweed4-debuginfo-32bit: before 3.1-21.3.2

libhogweed4-32bit: before 3.1-21.3.2

libgnutls30-debuginfo-32bit: before 3.4.17-8.4.1

libgnutls30-32bit: before 3.4.17-8.4.1

libapparmor1-debuginfo-32bit: before 2.8.2-56.6.3

libapparmor1-32bit: before 2.8.2-56.6.3

pam_apparmor-debuginfo: before 2.8.2-56.6.3

libnettle-debugsource: before 3.1-21.3.2

gnutls-debugsource: before 3.4.17-8.4.1

sssd-tools-debuginfo: before 1.16.1-7.28.9

sssd-tools: before 1.16.1-7.28.9

sssd-proxy-debuginfo: before 1.16.1-7.28.9

sssd-proxy: before 1.16.1-7.28.9

sssd-ldap-debuginfo: before 1.16.1-7.28.9

sssd-ldap: before 1.16.1-7.28.9

sssd-krb5-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common: before 1.16.1-7.28.9

sssd-krb5: before 1.16.1-7.28.9

sssd-ipa-debuginfo: before 1.16.1-7.28.9

sssd-ipa: before 1.16.1-7.28.9

sssd-dbus-debuginfo: before 1.16.1-7.28.9

sssd-dbus: before 1.16.1-7.28.9

sssd-common-debuginfo: before 1.16.1-7.28.9

sssd-common: before 1.16.1-7.28.9

sssd-ad-debuginfo: before 1.16.1-7.28.9

sssd-ad: before 1.16.1-7.28.9

sssd: before 1.16.1-7.28.9

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-tool: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client: before 4.15.4+git.324.8332acf1a63-3.54.1

samba: before 4.15.4+git.324.8332acf1a63-3.54.1

python-sssd-config-debuginfo: before 1.16.1-7.28.9

python-sssd-config: before 1.16.1-7.28.9

perl-apparmor-debuginfo: before 2.8.2-56.6.3

perl-apparmor: before 2.8.2-56.6.3

pam_apparmor: before 2.8.2-56.6.3

p11-kit-tools-debuginfo: before 0.23.2-8.3.2

p11-kit-tools: before 0.23.2-8.3.2

p11-kit-nss-trust: before 0.23.2-8.3.2

p11-kit: before 0.23.2-8.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-7.28.9

libsss_simpleifp0: before 1.16.1-7.28.9

libsss_nss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_nss_idmap0: before 1.16.1-7.28.9

libsss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_idmap0: before 1.16.1-7.28.9

libsss_certmap0-debuginfo: before 1.16.1-7.28.9

libsss_certmap0: before 1.16.1-7.28.9

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo: before 0.23.2-8.3.2

libp11-kit0: before 0.23.2-8.3.2

libnettle6-debuginfo: before 3.1-21.3.2

libnettle6: before 3.1-21.3.2

libipa_hbac0-debuginfo: before 1.16.1-7.28.9

libipa_hbac0: before 1.16.1-7.28.9

libhogweed4-debuginfo: before 3.1-21.3.2

libhogweed4: before 3.1-21.3.2

libgnutls30-debuginfo: before 3.4.17-8.4.1

libgnutls30: before 3.4.17-8.4.1

libapparmor1-debuginfo: before 2.8.2-56.6.3

libapparmor1: before 2.8.2-56.6.3

apparmor-parser-debuginfo: before 2.8.2-56.6.3

apparmor-parser: before 2.8.2-56.6.3

apache2-mod_apparmor-debuginfo: before 2.8.2-56.6.3

apache2-mod_apparmor: before 2.8.2-56.6.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

sssd-debugsource: before 1.16.1-7.28.9

samba-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debugsource: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

p11-kit-devel: before 0.23.2-8.3.2

p11-kit-debugsource: before 0.23.2-8.3.2

p11-kit-debuginfo: before 0.23.2-8.3.2

libsss_nss_idmap-devel: before 1.16.1-7.28.9

libsss_idmap-devel: before 1.16.1-7.28.9

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libipa_hbac-devel: before 1.16.1-7.28.9

libapparmor-devel: before 2.8.2-56.6.3

apparmor-debugsource: before 2.8.2-56.6.3

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:yast2-samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ca-certificates:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gnutls-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-nss-trust:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220323-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

6) Insufficient verification of data authenticity

EUVDB-ID: #VU60185

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-0336

CWE-ID: CWE-345 - Insufficient Verification of Data Authenticity

Exploit availability: No

Description

The vulnerability allows a local user to impersonate arbitrary services.

The vulnerability exists due to Samba AD DC relies only on SPN (service principals name) to identify services on the network. An attacker with ability to modify SPNs can bypass implemented protection and cause a denial of service condition by adding an SPN that matches an existing service or impersonate services on the network.

Mitigation

Update the affected package samba to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP Applications: 12-SP3 - 12-SP5

SUSE Linux Enterprise High Performance Computing: 12-SP5

SUSE Linux Enterprise High Availability: 12-SP5

SUSE Linux Enterprise Server: 12-SP3 - 12-SP5

SUSE Linux Enterprise Desktop: 12-SP5

SUSE Linux Enterprise Software Development Kit: 12-SP5

ctdb-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

ctdb: before 4.15.4+git.324.8332acf1a63-3.54.1

yast2-samba-client: before 3.1.23-3.3.1

samba-doc: before 4.15.4+git.324.8332acf1a63-3.54.1

ca-certificates: before 1_201403302107-15.3.3

apparmor-utils: before 2.8.2-56.6.3

apparmor-profiles: before 2.8.2-56.6.3

apparmor-docs: before 2.8.2-56.6.3

samba-winbind-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

pam_apparmor-debuginfo-32bit: before 2.8.2-56.6.3

pam_apparmor-32bit: before 2.8.2-56.6.3

p11-kit-debuginfo-32bit: before 0.23.2-8.3.2

p11-kit-32bit: before 0.23.2-8.3.2

libsamba-policy0-python3-debuginfo-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo-32bit: before 0.23.2-8.3.2

libp11-kit0-32bit: before 0.23.2-8.3.2

libnettle6-debuginfo-32bit: before 3.1-21.3.2

libnettle6-32bit: before 3.1-21.3.2

libhogweed4-debuginfo-32bit: before 3.1-21.3.2

libhogweed4-32bit: before 3.1-21.3.2

libgnutls30-debuginfo-32bit: before 3.4.17-8.4.1

libgnutls30-32bit: before 3.4.17-8.4.1

libapparmor1-debuginfo-32bit: before 2.8.2-56.6.3

libapparmor1-32bit: before 2.8.2-56.6.3

pam_apparmor-debuginfo: before 2.8.2-56.6.3

libnettle-debugsource: before 3.1-21.3.2

gnutls-debugsource: before 3.4.17-8.4.1

sssd-tools-debuginfo: before 1.16.1-7.28.9

sssd-tools: before 1.16.1-7.28.9

sssd-proxy-debuginfo: before 1.16.1-7.28.9

sssd-proxy: before 1.16.1-7.28.9

sssd-ldap-debuginfo: before 1.16.1-7.28.9

sssd-ldap: before 1.16.1-7.28.9

sssd-krb5-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common-debuginfo: before 1.16.1-7.28.9

sssd-krb5-common: before 1.16.1-7.28.9

sssd-krb5: before 1.16.1-7.28.9

sssd-ipa-debuginfo: before 1.16.1-7.28.9

sssd-ipa: before 1.16.1-7.28.9

sssd-dbus-debuginfo: before 1.16.1-7.28.9

sssd-dbus: before 1.16.1-7.28.9

sssd-common-debuginfo: before 1.16.1-7.28.9

sssd-common: before 1.16.1-7.28.9

sssd-ad-debuginfo: before 1.16.1-7.28.9

sssd-ad: before 1.16.1-7.28.9

sssd: before 1.16.1-7.28.9

samba-winbind-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-winbind: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-tool: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-ldb-ldap: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-libs: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-client: before 4.15.4+git.324.8332acf1a63-3.54.1

samba: before 4.15.4+git.324.8332acf1a63-3.54.1

python-sssd-config-debuginfo: before 1.16.1-7.28.9

python-sssd-config: before 1.16.1-7.28.9

perl-apparmor-debuginfo: before 2.8.2-56.6.3

perl-apparmor: before 2.8.2-56.6.3

pam_apparmor: before 2.8.2-56.6.3

p11-kit-tools-debuginfo: before 0.23.2-8.3.2

p11-kit-tools: before 0.23.2-8.3.2

p11-kit-nss-trust: before 0.23.2-8.3.2

p11-kit: before 0.23.2-8.3.2

libsss_simpleifp0-debuginfo: before 1.16.1-7.28.9

libsss_simpleifp0: before 1.16.1-7.28.9

libsss_nss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_nss_idmap0: before 1.16.1-7.28.9

libsss_idmap0-debuginfo: before 1.16.1-7.28.9

libsss_idmap0: before 1.16.1-7.28.9

libsss_certmap0-debuginfo: before 1.16.1-7.28.9

libsss_certmap0: before 1.16.1-7.28.9

libsamba-policy0-python3-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy0-python3: before 4.15.4+git.324.8332acf1a63-3.54.1

libp11-kit0-debuginfo: before 0.23.2-8.3.2

libp11-kit0: before 0.23.2-8.3.2

libnettle6-debuginfo: before 3.1-21.3.2

libnettle6: before 3.1-21.3.2

libipa_hbac0-debuginfo: before 1.16.1-7.28.9

libipa_hbac0: before 1.16.1-7.28.9

libhogweed4-debuginfo: before 3.1-21.3.2

libhogweed4: before 3.1-21.3.2

libgnutls30-debuginfo: before 3.4.17-8.4.1

libgnutls30: before 3.4.17-8.4.1

libapparmor1-debuginfo: before 2.8.2-56.6.3

libapparmor1: before 2.8.2-56.6.3

apparmor-parser-debuginfo: before 2.8.2-56.6.3

apparmor-parser: before 2.8.2-56.6.3

apache2-mod_apparmor-debuginfo: before 2.8.2-56.6.3

apache2-mod_apparmor: before 2.8.2-56.6.3

samba-devel-32bit: before 4.15.4+git.324.8332acf1a63-3.54.1

sssd-debugsource: before 1.16.1-7.28.9

samba-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debugsource: before 4.15.4+git.324.8332acf1a63-3.54.1

samba-debuginfo: before 4.15.4+git.324.8332acf1a63-3.54.1

p11-kit-devel: before 0.23.2-8.3.2

p11-kit-debugsource: before 0.23.2-8.3.2

p11-kit-debuginfo: before 0.23.2-8.3.2

libsss_nss_idmap-devel: before 1.16.1-7.28.9

libsss_idmap-devel: before 1.16.1-7.28.9

libsamba-policy-python3-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libsamba-policy-devel: before 4.15.4+git.324.8332acf1a63-3.54.1

libipa_hbac-devel: before 1.16.1-7.28.9

libapparmor-devel: before 2.8.2-56.6.3

apparmor-debugsource: before 2.8.2-56.6.3

CPE2.3

• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_availability:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP3:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP4:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_desktop:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit:12-SP5:*:*:*:*:*:*:*
• cpe:2.3:a:suse:ctdb-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ctdb:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:yast2-samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-doc:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:ca-certificates:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-utils:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-profiles:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-docs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:gnutls-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-proxy:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-krb5:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ipa:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-dbus:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-common:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-ad:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-winbind:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-tool:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-ldb-ldap:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-libs:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-client:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:python-sssd-config:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:perl-apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:pam_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-tools:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-nss-trust:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_simpleifp0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_certmap0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy0-python3:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libp11-kit0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libnettle6:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac0:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libhogweed4:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libgnutls30:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor1:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-parser:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apache2-mod_apparmor:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel-32bit:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:sssd-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:samba-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:p11-kit-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_nss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsss_idmap-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-python3-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libsamba-policy-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libipa_hbac-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:libapparmor-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:apparmor-debugsource:*:*:*:*:*:suse_linux:*:*

External links

https://www.suse.com/support/update/announcement/2022/suse-su-20220323-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.