What is CVE-2021-43566?

CVE-2021-43566 is a low-severity vulnerability in Samba, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 2.5/10. Published 2022-01-11.

How severe is CVE-2021-43566?

Low severity. CVSS v3 base score is 2.5 out of 10.

Vulnerability in Samba

CVE-2021-43566

All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for this attack to succeed.

Vulnerability class: Race Condition

EPSS: 0.004 (30.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.5 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Samba
N/a — versions n/a

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

cve@mitre.org (Exploit, x_refsource_MISC, Issue Tracking, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-43566?: CVE-2021-43566 is a low-severity vulnerability in Samba, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 2.5/10. Published 2022-01-11.
How severe is CVE-2021-43566?: Low severity. CVSS v3 base score is 2.5 out of 10.