What the vulnerability does

01Description

A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements.

Key dates

02Disclosure timeline

March 2, 2022 CVE published
August 3, 2024 Record updated