CVE-2021-3738

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description The issue is related to the use of 'association groups' in DCE/RPC, which allows sharing handles between multiple connections. These handles can reference connections to the sam.ldb database. However, when one connection within the association group ends, the database is left pointing at an invalid 'struct session info', potentially leading to a crash. It is also possible that this use-after-free condition could allow different user state to be pointed at, potentially enabling more privileged access. The vulnerability is associated with a use-after-free condition in the Samba AD DC RPC server software, which could be exploited by a remote attacker to cause a denial of service or elevate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.