--- title: "Samba Vulnerability CVE-2021-44142" slug: "faq-7" description: "CVE-2021-44142 is a privilege escalation vulnerability that allows remote attackers to execute arbitrary code on affected installations of Samba." updated: 2022-04-12T06:00:24Z published: 2022-04-12T06:00:24Z canonical: "kb.ctera.com/faq-7" --- > ## Documentation Index > Fetch the complete documentation index at: https://kb.ctera.com/llms.txt > Use this file to discover all available pages before exploring further. # Samba Vulnerability CVE-2021-44142 ## **Vulnerability Description** CVE-2021-44142 is a privilege escalation vulnerability that allows remote attackers to execute arbitrary code on affected installations of Samba. Access as a user that has write access to a file's extended attributes is required to exploit this vulnerability. ## **Vulnerability Details** Publication Date: Jan 31 2022 Vulnerability Link: [![](https://www.samba.org/favicon.ico)Samba - Security Announcement Archive](https://www.samba.org/samba/security/CVE-2021-44142.html) NVD CVSS Score: 9.9 ## **Affected CTERA Products** - CTERA Edge Filer (All versions) #### **Analysis** This vulnerability is considered critical, as a logged in user that has write access to a file's extended attributes may execute arbitrary code . CTERA products other than CTERA Edge Filers are not affected. #### **Workaround** No workaround is available #### **Permanent Solution** CTERA Edge Filer 7.0.1783.28, contains a fix for this issue. Customers who have not upgraded to this or a higher version are advised to schedule a short maintenance window for installing this patch version on their filers. ## **Related Articles** **[](/v1/docs/faq-3)**[](/v1/docs/faq-3)[Vulnerability Remediation](/v1/docs/faq-3)