CVE-2021-23192CWE-20

A flaw was found in the way samba implemented DCE/RPC

published March 2, 2022

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01953 · 80.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-03-02T00:00Z
EPSS history
Timeline
  • 02 MAR 00:00Z
    A flaw was found in the way samba implemented DCE/RPC
    cvelistv5