CVE-2021-20251: Race Condition

Published Feb 17, 2021
·
Updated

A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being successful if special conditions are met.

Other sources

A flaw was found in samba. A race condition in the password lockout code may lead to the risk of brute force attacks being sucessful if special conditions are met.

References:

https://bugzilla.samba.org/showbug.cgi?id=14611

Red Hat

Affected Software

3 affected components
Samba>=4.1.0<4.16.8
Samba>=4.17.0<4.17.4
fedoraproject fedora=37

Event History

Feb 17, 2021
Data Sourced
04:50 PM
DescriptionSeverityAffected Software
Mar 6, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness

Frequently Asked Questions

1

What is CVE-2021-20251?

CVE-2021-20251 is a vulnerability found in Samba that could lead to successful brute force attacks under certain conditions.

2

What is the severity of CVE-2021-20251?

The severity of CVE-2021-20251 is medium with a CVSS score of 5.9.

3

Which software versions are affected by CVE-2021-20251?

Samba versions 4.1.0 to 4.16.8 and 4.17.0 to 4.17.4 are affected by CVE-2021-20251. Fedora version 37 is also affected.

4

How can CVE-2021-20251 be fixed?

Apply the latest security patches provided by the Samba project or the respective software vendor.

5

Where can I find more information about CVE-2021-20251?

More information about CVE-2021-20251 can be found at the following references: [link1], [link2], [link3].

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203