{"answers":{"affected":"","exploited":"There is no known exploitation of GSD-2021-44142 in the wild and no public exploit code.","fix":"No fix has been published for GSD-2021-44142 yet. Limit exposure of the affected software until one is available.","what":"GSD-2021-44142 is a memory corruption vulnerability, published on 1 Feb 2022. Any signed-in user can exploit it over the network, with no action from the victim."},"fix_prompt":"Check this codebase for GSD-2021-44142 and fix it if it is affected.\n\nWhat it is: GSD-2021-44142 is a memory corruption vulnerability, published on 1 Feb 2022. Any signed-in user can exploit it over the network, with no action from the victim.\nExploitation: There is no known exploitation of GSD-2021-44142 in the wild and no public exploit code.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/GSD-2021-44142/ (Markdown: https://insights.sbomify.com/GSD-2021-44142/index.md)","id":"GSD-2021-44142","markdown":"https://insights.sbomify.com/GSD-2021-44142/index.md","name":"GSD-2021-44142","record":{"aliases":[],"analysis":{"component_type":"server_software","fix_type":"upgrade","impacts":["code_execution","privilege_escalation"],"network_reachable":"yes","non_default_config":true,"product_category":"Samba file server","requires_auth":"low_privilege","summary":"Remote attackers can execute arbitrary code as root on Samba servers using the vfs_fruit module with default metadata settings.","user_interaction":"not_required","vuln_class":"memory_corruption"},"analysis_generated_by":"qwen3.8-flash-next","assigner":null,"cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"To quote the Samba advisory: \n\n All versions of Samba prior to 4.13.17 are vulnerable to an out-of-bounds heap read write vulnerability that allows remote attackers to execute arbitrary code as root on affected Samba installations that use the VFS module vfs_fruit. \n\n The specific flaw exists within the parsing of EA metadata when opening files in smbd. Access as a user that has write access to a file's extended attributes is required to exploit this vulnerability. Note that this could be a guest or unauthenticated user if such users are allowed write access to file extended attributes. \n\n The problem in vfs_fruit exists in the default configuration of the fruit VFS module using fruit:metadata=netatalk or fruit:resource=file. If both options are set to different settings than the default values, the system is not affected by the security issue.","ecosystems":[],"exploits":{"exploitdb":null,"first_seen":null,"github_poc":null,"max_poc_stars":null,"metasploit":null,"nuclei":null,"refs":[],"tier":null},"has_fix":null,"headline":"Remote code execution as root in Samba prior to version 4.13.17","id":"GSD-2021-44142","indexable":true,"kev":null,"kind":"advisory","links":{"ecosystem":null,"product":null,"products":[],"type":"memory_corruption","year":"2022"},"n_packages":0,"n_references":null,"packages":[],"products":null,"published":"2022-02-01","related":[],"sources":[{"class":"open","licence":"CC0 1.0","name":"Global Security Database","prefix":"GSD"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":null,"updated":null,"vendors":null},"summary":"Remote attackers can execute arbitrary code as root on Samba servers using the vfs_fruit module with default metadata settings.","url":"https://insights.sbomify.com/GSD-2021-44142/"}