{"id":"CVE-2021-20251","aliases":["AZL-27917","AZL-36998","CLSA-2026-1779354406","CLSA-2026-1779354817","CLSA-2026-1779365436","DEBIAN-CVE-2021-20251","EUVD-2021-7689","GHSA-9ppx-3j9g-766w","SUSE-SU-2023:0122-1","SUSE-SU-2023:0126-1","SUSE-SU-2023:0160-1","SUSE-SU-2023:0162-1","SUSE-SU-2023:0163-1","SUSE-SU-2023:0164-1","SUSE-SU-2023:0222-1","SUSE-SU-2023:0620-1","UBUNTU-CVE-2021-20251","USN-5822-1","openSUSE-SU-2024:12435-1"],"status":"published","title":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of...","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00758,"percentile":0.55708,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2022-10-27T00:00:00Z","modified":"2026-10-26T09:31:48Z","fixes":[{"ecosystem":"Azure Linux:3","package":"samba","fixed_in":["4.18.3-1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ctdb","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"ctdb-tests","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libsmbclient","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libsmbclient-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libwbclient","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"libwbclient-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-client","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-client-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-common","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-common-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-common-tools","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-dc","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-dc-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-krb5-printing","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-pidl","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-python","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-python-test","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-test","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-test-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-vfs-glusterfs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-winbind","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-clients","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-krb5-locator","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-modules","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ctdb","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"ctdb-tests","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libsmbclient","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libsmbclient-devel","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libwbclient","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"libwbclient-devel","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-client","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-client-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-common","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-common-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-common-tools","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-dc","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-dc-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-devel","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-krb5-printing","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-pidl","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-python","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-python-test","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-test","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-test-libs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-vfs-glusterfs","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-clients","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-krb5-locator","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-modules","fixed_in":["4.10.16-25.0.9.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"ctdb","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"ctdb-tests","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libsmbclient","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libsmbclient-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libwbclient","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"libwbclient-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-client","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-client-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-common","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-common-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-common-tools","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-dc","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-dc-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-devel","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-krb5-printing","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-pidl","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-python","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-python-test","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-test","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-test-libs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-vfs-glusterfs","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-winbind","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-clients","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-krb5-locator","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-modules","fixed_in":["4.10.16-25.el7_9.tuxcare.els8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.17.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.17.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.17.2+dfsg-3"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"samba","fixed_in":["4.17.1+git.270.17afe7cb6b-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.3-1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"ctdb-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-client-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-dc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-dc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-krb5-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-pidl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-test-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-vfs-glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"samba-winbind-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"ctdb-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-client-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-dc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-dc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-krb5-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-pidl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-test-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-vfs-glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"samba-winbind-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.0.9.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"ctdb-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libwbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libwbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-client-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-common-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-dc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-dc-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-krb5-printing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-pidl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-python-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-test-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-vfs-glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"samba-winbind-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.16-25.el7_9.tuxcare.els8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.17.2+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.17.2+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.17.2+dfsg-3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-38.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150300.3.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.534.0d9f8ece26-3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.534.0d9f8ece26-3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.534.0d9f8ece26-3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.534.0d9f8ece26-3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.13+git.616.557146479a-150200.3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.1","2:4.15.13+dfsg-0ubuntu0.20.04.2","2:4.15.13+dfsg-0ubuntu0.20.04.3","2:4.15.13+dfsg-0ubuntu0.20.04.4","2:4.15.13+dfsg-0ubuntu0.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.6","2:4.15.13+dfsg-0ubuntu0.20.04.7","2:4.15.13+dfsg-0ubuntu0.20.04.8","2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1","2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3","2:4.15.13+dfsg-0ubuntu1","2:4.15.13+dfsg-0ubuntu1.1","2:4.15.13+dfsg-0ubuntu1.2","2:4.15.13+dfsg-0ubuntu1.3","2:4.15.13+dfsg-0ubuntu1.4","2:4.15.13+dfsg-0ubuntu1.5","2:4.15.13+dfsg-0ubuntu1.6","2:4.15.13+dfsg-0ubuntu1.7","2:4.15.13+dfsg-0ubuntu1.8","2:4.15.13+dfsg-0ubuntu1.9","2:4.15.13+dfsg-0ubuntu1.10","2:4.15.13+dfsg-0ubuntu1.12","2:4.15.13+dfsg-0ubuntu1.13"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.17~dfsg-0ubuntu1.20.04.4"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3"],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.1+git.270.17afe7cb6b-1.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929800","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=14611","tags":["x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20230331-0005/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202309-06","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20251","tags":["web"]},{"url":"https://github.com/advisories/GHSA-9ppx-3j9g-766w"},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1779354406.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1779354817.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1779365436.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-20251","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230122-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173994","tags":["report"]},{"url":"https://bugzilla.suse.com/1201496","tags":["report"]},{"url":"https://bugzilla.suse.com/1205385","tags":["report"]},{"url":"https://bugzilla.suse.com/1206504","tags":["report"]},{"url":"https://bugzilla.suse.com/1206546","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38023","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230126-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230160-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200102","tags":["report"]},{"url":"https://bugzilla.suse.com/1201490","tags":["report"]},{"url":"https://bugzilla.suse.com/1201492","tags":["report"]},{"url":"https://bugzilla.suse.com/1201493","tags":["report"]},{"url":"https://bugzilla.suse.com/1201495","tags":["report"]},{"url":"https://bugzilla.suse.com/1201689","tags":["report"]},{"url":"https://bugzilla.suse.com/1204254","tags":["report"]},{"url":"https://bugzilla.suse.com/1205126","tags":["report"]},{"url":"https://bugzilla.suse.com/1205386","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42898","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230162-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230163-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230164-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230222-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230620-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-20251","tags":["report"]},{"url":"https://gitlab.com/samba-team/samba/-/merge_requests/2708","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5822-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-42898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-45141","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-20251","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","status":"published","published":"2023-03-06T00:00:00Z","modified":"2025-03-06T15:49:56.099Z","cwes":["CWE-362"],"updated_at":"2026-11-02T14:32:55.564736Z"}],"euvd":[{"id":"EUVD-2021-7689","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","status":"published","published":"2023-03-06T00:00:00Z","modified":"2025-03-06T15:49:56Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"none"}],"updated_at":"2026-11-02T20:53:11.47787Z"}],"ghsa":[{"id":"GHSA-9ppx-3j9g-766w","title":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of...","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","status":"published","published":"2023-03-07T00:30:25Z","modified":"2023-09-26T05:03:26Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:54:46.481792Z"}],"nvd":[{"id":"CVE-2021-20251","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","status":"published","published":"2023-03-06T23:15:10.387Z","modified":"2026-06-17T03:33:32.787Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:07:07.323379Z"}],"osv":[{"id":"AZL-27917","title":"CVE-2021-20251 affecting package samba 4.12.5-7","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","status":"published","published":"2023-03-06T23:15:10Z","modified":"2026-04-21T04:25:43.73393Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"AZL-36998","title":"CVE-2021-20251 affecting package samba for versions less than 4.18.3-1","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","status":"published","published":"2023-03-06T23:15:10Z","modified":"2026-04-21T04:32:34.084053Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"CVE-2021-20251","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","status":"published","published":"2023-03-06T23:15:10.387Z","modified":"2026-10-24T10:31:02.049959919Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:18.004149Z"},{"id":"DEBIAN-CVE-2021-20251","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","status":"published","published":"2023-03-06T23:15:10.387Z","modified":"2026-10-23T18:03:58.895321239Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"UBUNTU-CVE-2021-20251","description":"A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.","status":"published","published":"2022-10-27T00:00:00Z","modified":"2026-07-28T16:08:21.806640986Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"},{"id":"CLSA-2026-1779354406","title":"samba: Fix of CVE-2021-20251","description":"- CVE-2021-20251: fix race condition in the password lockout code that\n  allowed determined attackers to exceed the configured bad-password\n  count by issuing concurrent authentication / SAMR password-change\n  requests for the same account; the bad-password-count read and the\n  follow-up increment now run under a per-user named mutex in both\n  check_sam_security() and pass_oem_change()","status":"published","published":"2026-05-21T15:43:36Z","modified":"2026-10-26T09:31:48.749706331Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779354817","title":"samba: Fix of CVE-2021-20251","description":"- CVE-2021-20251: fix race condition in the password lockout code that\n  allowed determined attackers to exceed the configured bad-password\n  count by issuing concurrent authentication / SAMR password-change\n  requests for the same account; the bad-password-count read and the\n  follow-up increment now run under a per-user named mutex in both\n  check_sam_security() and pass_oem_change()","status":"published","published":"2026-05-21T09:13:41Z","modified":"2026-06-01T00:33:27.509564854Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"CLSA-2026-1779365436","title":"samba: Fix of CVE-2021-20251","description":"- CVE-2021-20251: fix race condition in the password lockout code that\n  allowed determined attackers to exceed the configured bad-password\n  count by issuing concurrent authentication / SAMR password-change\n  requests for the same account; the bad-password-count read and the\n  follow-up increment now run under a per-user named mutex in both\n  check_sam_security() and pass_oem_change()","status":"published","published":"2026-05-21T12:10:40Z","modified":"2026-06-01T00:33:28.503548634Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"openSUSE-SU-2024:12435-1","title":"ctdb-4.17.1+git.270.17afe7cb6b-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.17.1+git.270.17afe7cb6b-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:32:45.932287Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0122-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n  Secure channel (bsc#1206504).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n- CVE-2020-14323: Fixed a denial of service in winbindd (bsc#1173994).\n- CVE-2022-32742: Fixed incorrect length check in SMB1write,\n  SMB1write_and_close, SMB1write_and_unlock (bsc#1201496).\n","status":"published","published":"2023-01-23T08:34:37Z","modified":"2025-05-02T04:30:29.993093Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0126-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n  Secure channel (bsc#1206504).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n","status":"published","published":"2023-01-24T12:22:29Z","modified":"2026-02-04T03:46:29.826395Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0160-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n\n- Updated to version 4.15.13:\n  - CVE-2022-37966: Fixed an issue where a weak cipher would be\n    selected to encrypt session keys, which could lead to privilege\n    escalation (bsc#1205385).\n  - CVE-2022-37967: Fixed a potential privilege escalation issue via\n    constrained delegation due to weak a cryptographic algorithm\n    being selected (bsc#1205386).\n  - CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n    Secure channel (bsc#1206504).\n\n- Updated to version 4.15.12:\n  - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on\n  32-bit systems (bsc#1205126).\n\n- Updated to version 4.15.11:\n  - CVE-2022-3437: Fixed a buffer overflow in Heimdal unwrap_des3()\n  (bsc#1204254).\n\n- Updated to version 4.15.10:\n  - Fixed a potential crash due to a concurrency issue (bsc#1200102).\n\n- Updated to version 4.15.9:\n  - CVE-2022-32742: Fixed an information leak that could be triggered\n    via SMB1 (bsc#1201496).\n  - CVE-2022-32746: Fixed a memory corruption issue in database\n    audit logging (bsc#1201490).\n  - CVE-2022-2031: Fixed AD restrictions bypass associated with\n    changing passwords (bsc#1201495).\n  - CVE-2022-32745: Fixed a remote server crash that could be\n    triggered with certain LDAP requests (bsc#1201492).\n  - CVE-2022-32744: Fixed an issue where AD users could have forged\n    password change requests on behalf of other users (bsc#1201493).\n\nOther fixes:\n\n- Fixed a problem when using bind as samba-ad-dc backend related to\n  the named service (bsc#1201689).\n","status":"published","published":"2023-01-26T17:22:47Z","modified":"2026-02-04T03:17:36.805483Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0162-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n","status":"published","published":"2023-01-26T17:24:34Z","modified":"2025-05-02T04:31:02.684449Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0163-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n  Secure channel (bsc#1206504).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n","status":"published","published":"2023-01-26T17:25:29Z","modified":"2026-02-04T04:30:55.278439Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0164-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n","status":"published","published":"2023-01-26T17:26:11Z","modified":"2026-02-04T03:11:27.686008Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0222-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n  Secure channel (bsc#1206504).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n","status":"published","published":"2023-02-01T08:35:38Z","modified":"2026-02-04T02:15:34.59186Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0620-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed bad password count that was not incremented atomically (bsc#1206546).\n- CVE-2022-38023: Fixed weak RC4/HMAC-MD5 NetLogon Secure Channel usage should be avoided (bsc#1206504).\n- CVE-2022-37966: Fixed privilege elevation vulnerability with option 'kerberos encryption types = legacy' which would force RC4-HMAC as a client even if the server supports AES (bsc#1205385).\n","status":"published","published":"2023-03-06T09:54:10Z","modified":"2026-02-04T04:38:08.523111Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-5822-1","title":"samba vulnerabilities","description":"It was discovered that Samba incorrectly handled the bad password count\nlogic. A remote attacker could possibly use this issue to bypass bad\npasswords lockouts. This issue was only addressed in Ubuntu 22.10.\n(CVE-2021-20251)\n\nEvgeny Legerov discovered that Samba incorrectly handled buffers in\ncertain GSSAPI routines of Heimdal. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-3437)\n\nTom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos\nkeys. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-37966, CVE-2022-37967)\n\nIt was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure\nChannel. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-38023)\n\nGreg Hudson discovered that Samba incorrectly handled PAC parsing. On\n32-bit systems, a remote attacker could use this issue to escalate\nprivileges, or possibly execute arbitrary code. (CVE-2022-42898)\n\nJoseph Sutton discovered that Samba could be forced to issue rc4-hmac\nencrypted Kerberos tickets. A remote attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-45141)\n\nWARNING: The fixes included in these updates introduce several important\nbehavior changes which may cause compatibility problems interacting with\nsystems still expecting the former behavior. Please see the following\nupstream advisories for more information:\n\nhttps://www.samba.org/samba/security/CVE-2022-37966.html\nhttps://www.samba.org/samba/security/CVE-2022-37967.html\nhttps://www.samba.org/samba/security/CVE-2022-38023.html\n","status":"published","published":"2023-01-24T12:58:42Z","modified":"2026-04-27T16:32:25.164245112Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}
