CVE-2021-44142

Samba's vfs_fruit module has a vulnerability in how it handles special file attributes, allowing attackers with write access to read and write beyond memory boundaries. This can lead to arbitrary code execution with root privileges on affected systems.

The vfs_fruit module in Samba versions before 4.13.17, 4.14.12, and 4.15.5 improperly validates extended file attributes (xattr), enabling out-of-bounds heap read/write operations (CWE-125, CWE-787). An authenticated remote attacker with write access to xattr can craft malicious attributes to trigger heap buffer overflow, achieving arbitrary code execution in the smbd process context.