Samba vfs_streams_xattr Module Information Disclosure Vulnerability

A vulnerability exists in the Samba vfs_streams_xattr module, where uninitialized heap memory can be written into alternate data streams. This flaw allows authenticated users to access residual memory content that may contain sensitive information, leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of sensitive information from memory.

Remediation

Users can upgrade to Samba versions 4.23.2, 4.22.5, or 4.21.9, all of which include the necessary fix for this vulnerability.