Bug 1929800 (CVE-2021-20251)

Summary:	CVE-2021-20251 samba: Race condition in the bad password lockout code
Product:	[Other] Security Response	Reporter:	Pedro Sampaio <psampaio>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED CURRENTRELEASE	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	abokovoy, anoopcs, asn, dkarpele, hvyas, mkosek, nobody, pfilipen, rhs-smb, sbose, security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:	A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-03-14 12:53:47 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2175286
Bug Blocks:	1926290, 2175287

Description Pedro Sampaio 2021-02-17 16:50:21 UTC

A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being sucessful if special conditions are met.

References:

https://bugzilla.samba.org/show_bug.cgi?id=14611

Comment 5 Pedro Sampaio 2023-03-03 19:12:54 UTC

Created samba tracking bugs for this issue:

Affects: fedora-all [bug 2175286]