DCE/RPC Vulnerability in Samba Affects User Credentials and Resource Sharing

CVE-2021-3738

What is CVE-2021-3738?

In DCE/RPC implementations within Samba, a vulnerability exists that allows handles (representative of resource state) to be improperly shared among multiple connections through 'association groups'. While the handling of the sam.ldb database was appropriately shared, the associated user credentials were not, leading to a scenario where a concluded connection could leave the database referencing an invalid session state. This flaw risks application crashes or, in dire circumstances, permits access to privileged states, thus compromising user credential integrity.

References