CVE-2021-23192

samba: Subsequent DCE/RPC fragment injection vulnerability

Loading…

Severity

Moderate

Red Hat Product Security

4.8

CVSS 3.1

Review impact separately from score.

Published · November 9, 2021

Updated · November 22, 2025

Description

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Setting

dcesrv:max auth states=0

in the smb.conf will provide some mitigation against this issue.

CVSS / CWE

CVSS 3.1 · 4.8
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE not specified