CVE-2021-44142

Description

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.

Description (MITRE) cveawg.mitre.org

Pulled from cveawg.mitre.org/api/cve/CVE-2021-44142 on 2026-07-27. Shown when MITRE's text differs from the cvelistV5 mirror.

The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.

Overview

State

—

Assigner (CNA)

—

CVSS severity

MEDIUM

CVSS score

5.0 / 10

CVSS vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Effective score

5.0 / 10 MEDIUM source: CNA overview

MSRC score

8.8 / 10 HIGH MS rating: Important

CWE(s)

CWE-125

Reserved

—

Published

2022-02-21 00:00 UTC

Last updated

2026-02-18 03:19 UTC

Source

https://www.rapid7.com/db/vulnerabilities/alpine-linux-cve-2021-44142/

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published

2022-02-21 15:15:07 UTC

NVD last modified

2026-06-17 04:11:56 UTC

NVD CVSS v3.1

8.8 / 10 HIGH source: nvd@nist.gov

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability subscore

2.8 / 10

Impact subscore

5.9 / 10

EPSS score

0.7372 (probability of exploitation in next 30 days)

EPSS percentile

99.42% vs all CVEs — higher = more likely to be exploited, as of 2026-07-27

NVD-assigned CWE(s): CWE-125, CWE-787 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2021-30995

Assigner

redhat

Published

Feb 21, 2022, 2:30:12 PM

Updated

Apr 23, 2025, 7:02:19 PM

EUVD base score (CVSS 3.1)

8.8 / 10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EUVD-reported EPSS

73.7200

Vendors

Samba

Products

Samba

Samba (unspecified <4.13.17)

Samba (unspecified <4.15.5)

Samba (unspecified <4.14.12)

Aliases

GHSA-mpfw-9wp5-hfff

ENISA description: The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.

Microsoft Security Response Center MSRC

Microsoft's vendor-authoritative record from the Security Update Guide — its own CVSS score, impact, severity rating, exploit assessment, and KB-article fixes. Refreshed 2026-09-25 03:00 UTC (source: CVRF).

MS severity

Important

MS CVSS base score

8.8 / 10 (temporal 8.8)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Release

2022-Feb

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

MITRE references (5) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

• https://www.zerodayinitiative.com/blog/2022/2/1/cve-2021-44142-details-on-a-samba-code-execution-bug-demonstrated-at-pwn2own-austin
• https://bugzilla.samba.org/show_bug.cgi?id=14914
• https://kb.cert.org/vuls/id/119678 third-party-advisory
• GLSA-202309-06 vendor-advisory
• https://www.samba.org/samba/security/CVE-2021-44142.html

Web references (12)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• None Available msrc
• MSRC update guide: CVE-2021-44142 msrc
• None Available msrc
• http://www.samba.org/samba/security/CVE-2021-44142.html rapid7:www.samba.org
• https://errata.rockylinux.org/RLSA-2022:0332 rapid7:errata.rockylinux.org
• https://errata.almalinux.org/8/ALSA-2022-0332.html rapid7:errata.almalinux.org
• https://www.cve.org/CVERecord?id=CVE-2021-44142 rapid7:www.cve.org
• https://security.alpinelinux.org/vuln/CVE-2021-44142 rapid7:security.alpinelinux.org
• http://cwe.mitre.org/data/definitions/787.html rapid7:cwe.mitre.org
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-30995 rapid7:euvd.enisa.europa.eu
• https://attackerkb.com/topics/CVE-2021-44142 rapid7:attackerkb.com
• http://cwe.mitre.org/data/definitions/125.html rapid7:cwe.mitre.org

• Rapid7 — Solution
  rapid7

  debian-upgrade-samba

  2026-05-29 02:45 UTC
• Rapid7 — Solution
  rapid7

  amazon-linux-upgrade-samba

  2026-05-29 01:31 UTC

Only Available for Registered Users. Sign in to view.