CVE-2021-3671: Debian Linux

Medium severity, CVSS 6.5. EPSS: 2.1% chance of exploitation in the next 30 days.

A null pointer de-reference was found in the way samba kerberos server handled missing sname in TGS-REQ (Ticket Granting Server - Request). An authenticated user could use this flaw to crash the samba server.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Netapp Management Services For Element Software: affected versions not specified
• Netapp Management Services For Netapp Hci: affected versions not specified
• Netapp Ontap Select Deploy Administration Utility: affected versions not specified
• Samba Samba: before 4.13.12 (fixed in 4.13.12); from 4.14.0, before 4.14.8 (fixed in 4.14.8)

Published 2021-10-12. Last modified 2026-06-17.