CVE-2021-3671

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
n/a	Samba	Fixed in samba 4.13.12, samba 4.14.8

References

https://bugzilla.redhat.com/show_bug.cgi?id=2013080%2C
https://bugzilla.samba.org/show_bug.cgi?id=14770%2C
https://github.com/heimdal/heimdal/commit/04171147948d0a3636bc6374181926f0fb2ec83aPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00034.htmlMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20221215-0002/Third Party Advisory
https://security.netapp.com/advisory/ntap-20230216-0008/Third Party Advisory
https://www.debian.org/security/2022/dsa-5287Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2013080%2C
https://bugzilla.samba.org/show_bug.cgi?id=14770%2C
https://github.com/heimdal/heimdal/commit/04171147948d0a3636bc6374181926f0fb2ec83aPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/11/msg00034.htmlMailing List, Third Party Advisory
https://security.netapp.com/advisory/ntap-20221215-0002/Third Party Advisory
https://security.netapp.com/advisory/ntap-20230216-0008/Third Party Advisory
https://www.debian.org/security/2022/dsa-5287Third Party Advisory

Timeline

Published: Oct 12, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-367108.8ToaruOS 1.99.2 is affected by incorrect access control via the kernel. Improper MMU management and having a low GDT address allows it to be CVE-2021-367119.8WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.CVE-2021-367125.4Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function.CVE-2021-367136.1Cross Site Scripting (XSS) vulnerability in the DataTables plug-in 1.9.2 for jQuery allows attackers to run arbitrary code via the sBaseName CVE-2021-367167.5A ReDoS (regular expression denial of service) flaw was found in the Segment is-email package before 1.0.1 for Node.js. An attacker that is CVE-2021-367177.5Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the ro CVE-2021-367186.5SYNEL - eharmonynew / Synel Reports - The attacker can log in to the system with default credentials and export a report of eharmony system CVE-2021-367198.8PineApp - Mail Secure - The attacker must be logged in as a user to the Pineapp system. The attacker exploits the vulnerable nicUpload.php f CVE-2021-36725.6A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to o CVE-2021-367206.1PineApp - Mail Secure - Attacker sending a request to :/blocking.php?url=<script>alert(1)</script> and stealing cookies .CVE-2021-367215.3Sysaid API User Enumeration - Attacker sending requests to specific api path without any authorization before 21.3.60 version could get user CVE-2021-367229.8Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dumping the whole datab