Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2021-44142

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.

CVSS 8.8 · HighBuzz score 36.5

Buzz score

Why this CVE is surfacing

Buzz score total 36.5

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 22.0 · diversity 14.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
22.0
8 evidence mentions in the snapshot
Diversity score
14.5
5 sources across 2 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
8 source links · newest first
  • Western Digital addressed a critical bug in My Cloud OS 5Security Affairs

    Western Digital fixed a critical flaw affecting My Cloud OS 5 devices that allowed attackers to gain remote code execution with root privileges. Western Digital has addressed a critical vulnerability, tracked as CVE-2021-44142, that could have allowed attackers to gain remote code execution with root privileges on unpatched My Cloud OS 5 devices. The CVE-2021-44142 […]

    newssecurityaffairs.comMar 27, 2022, 2:04 PM
  • 7th February– Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 7th February, please download our Threat Intelligence Bulletin. Top Attacks and Breaches A significant Ransomware attack has disrupted operations of oil port terminals in Belgium, Germany and in the Netherlands, affecting at least 17 ports and resulting in difficulties loading and unloading refined product cargoes. The […]

    vendorresearch.checkpoint.comFeb 7, 2022, 12:11 PM
  • Security Affairs newsletter Round 352Security Affairs

    A new round of the weekly Security Affairs newsletter arrived! Every week the best security articles from Security Affairs free for you in your email box. If you want to also receive for free the newsletter with the international press subscribe here. LockBit ransomware gang claims to have stolen data from PayBito crypto exchange FBI issued […]

    newssecurityaffairs.comFeb 6, 2022, 10:07 AM
  • Week in review: Samba vulnerability, phishing kits bypassing MFA, Patch Tuesday forecastHelp Net Security

    Here’s an overview of some of last week’s most interesting news, articles and interviews: February 2022 Patch Tuesday forecast: A rough start for 2022 January 2022 Patch Tuesday was a rough one for Microsoft — and us. In the week following Patch Tuesday, Microsoft was forced to pull and subsequently re-issue several updates for Windows Server 2012, 2019, and 2022, as well as Windows 10 and 11. Samba bug may allow code execution as root … More →

    newswww.helpnetsecurity.comFeb 6, 2022, 9:00 AM
  • Samba Patches Critical Flaws That Earned Researchers Big RewardsSecurityWeek

    The latest updates for Samba, the widely used interoperability suite that provides file and print sharing capabilities between Windows and Unix computers, patch critical vulnerabilities that earned researchers tens of thousands of dollars at a recent hacking contest.

    newswww.securityweek.comFeb 2, 2022, 11:39 AM
  • Samba bug may allow code execution as root on Linux machines, NAS devices (CVE-2021-44142)Help Net Security

    A critical vulnerability (CVE-2021-44142) in Samba, a widely used open source implementation of the Server Message Block (SMB) networking protocol, could allow attackers to execute arbitrary code as root on affected Samba installations. Several updated versions of Samba have been released on Monday, fixing CVE-2021-44142 and two other flaws (1, 2), but since the software is included in most Linux and Unix-like operating systems (including Apple’s macOS and macOS Server), users of those are advised … More →

    newswww.helpnetsecurity.comFeb 2, 2022, 10:38 AM
  • Samba fixed CVE-2021-44142 remote code execution flawSecurity Affairs

    Samba fixes a critical flaw, tracked as CVE-2021-44142, that can allow remote attackers to execute code with root privileges. Samba has addressed a critical vulnerability, tracked as CVE-2021-44142, that can be exploited by remote attackers to gain code execution with root privileges on servers running vulnerable software. Samba is a free software re-implementation of the SMB networking […]

    newssecurityaffairs.comJan 31, 2022, 10:14 PM
  • Samba patches critical vulnerability that allows remote code execution as rootMalwarebytes Labs

    Samba developers have patched a vulnerabilitythat allows remote attackers to execute arbitrary code as root on affected Samba installations that use…

    newswww.malwarebytes.comJan 31, 2022, 5:00 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence