topic Re: Samba Out-of-Bounds Heap R/W Remote Code Execution (RCE) Vulnerability (CVE-2021-44142) in Advanced Threat Prevention Discussions

Samba Out-of-Bounds Heap R/W Remote Code Execution (RCE) Vulnerability (CVE-2021-44142)

Pras — Thu, 03 Feb 2022 06:19:07 GMT

Hi All,

I would like to know if PAN-OS is affected by the Samba Out-of-Bounds Heap R/W Remote Code Execution (RCE) Vulnerability (CVE-2021-44142) and if they are what actions need to be taken.

We are running 9.1.11-h3 on PA-Firewall and 8.1.15 Panorama.

I have searched the PA threat vault and cannot find anything related there.

Many Thanks,

Re: Samba Out-of-Bounds Heap R/W Remote Code Execution (RCE) Vulnerability (CVE-2021-44142)

Pras — Sun, 06 Feb 2022 23:38:36 GMT

@BPry Do you have any idea on this? Thank you in advance.

Re: Samba Out-of-Bounds Heap R/W Remote Code Execution (RCE) Vulnerability (CVE-2021-44142)

BPry — Mon, 07 Feb 2022 03:11:07 GMT

@Pras,

First and foremost, your Panorama major version should never be behind your firewalls. I'd recommend upgrading your Panorama instance to 9.1 at least to match your firewalls.

While PAN-OS uses Samba, Panorama does not. Since PAN-OS only uses Samba internally and it isn't exposed, I don't believe this would be exploitable at all in its current deployment.

Re: Samba Out-of-Bounds Heap R/W Remote Code Execution (RCE) Vulnerability (CVE-2021-44142)

Pras — Mon, 07 Feb 2022 03:27:30 GMT

Thanks for the update @BPry I appreciate it. Thank you for your suggestion too.
Cheers,