CVE-2021-3671CWE-476

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request)

published October 12, 2021

CVSS
—
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02118 · 81.7th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2021-10-12T00:00Z
EPSS history
Timeline
  • 12 OCT 00:00Z
    A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request)
    cvelistv5