Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2021-45100

CVSSv4: NA | CVSSv3: 7.5 | CVSSv2: 5 | VMScore: 850 | EPSS: 0.00329 | KEV: Not Included
Published: 16/12/2021 Updated: 21/11/2024

Vulnerability Summary

The ksmbd server up to and including 3.4.2, as used in the Linux kernel up to and including 5.15.8, sometimes communicates in cleartext even though encryption has been enabled. This occurs because it sets the SMB2_GLOBAL_CAP_ENCRYPTION flag when using the SMB 3.1.1 protocol, which is a violation of the SMB protocol specification. When Windows 10 detects this protocol violation, it disables encryption.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

ksmbd project ksmbd

netapp h410c firmware -

netapp h300s firmware -

netapp h500s firmware -

netapp h700s firmware -

netapp h300e firmware -

netapp h500e firmware -

netapp h700e firmware -

netapp h410s firmware -

Vendor Advisories

Red Hat: CVE-2021-45100
The ksmbd server through 342, as used in the Linux kernel through 5158, sometimes communicates in cleartext even though encryption has been enabled This occurs because it sets the SMB2_GLOBAL_CAP_ENCRYPTION flag when using the SMB 311 protocol, which is a violation of the SMB protocol specification When Windows 10 detects this protocol viol ...

References

CWE-319https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2021-45100https://www.first.org/epsshttps://github.com/cifsd-team/ksmbd/issues/550https://github.com/cifsd-team/ksmbd/pull/551https://marc.info/?l=linux-kernel&m=163961726017023&w=2https://security.netapp.com/advisory/ntap-20220107-0001/https://github.com/cifsd-team/ksmbd/issues/550https://github.com/cifsd-team/ksmbd/pull/551https://marc.info/?l=linux-kernel&m=163961726017023&w=2https://security.netapp.com/advisory/ntap-20220107-0001/
Preferred Score:
CVSSv2
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
physicalprivilegeCVE-2025-26475cozystay - hotel booking wordpress themeCVE-2025-1316CVE-2024-27564CVE-2025-29137dellCVE-2025-25589hcl softwareloftoceaninjectCVE-2025-30140
Home
/
Search Results
/
CVE-2021-45100
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook