KB44996 - CVE-2021-44142 - Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution

A vulnerability that allows remote attackers to execute arbitrary code as root on affected Samba installations that use the VFS module vfs_fruit has been reported on the 1st of Feb, 2022.

The library/package does not have the code path hence PCS,PPS and ICS cannot be exploitable.

More details can be found in the links below,

https://access.redhat.com/security/cve/cve-2021-44142
https://www.samba.org/samba/security/CVE-2021-44142.html

Ivanti Pulse Engineering teams have completed their investigation and the complete results are updated in the table below. 
 

Product	Impact
Pulse Secure Virtual Traffic Manager	Not Affected*
Pulse Secure Services Director	Not Affected*
Pulse Secure Web Application Firewall	Not Affected*
Pulse Connect Secure	Not Exploitable**
Ivanti Connect Secure (ICS)	Not Exploitable**
Pulse Policy Secure	Not Exploitable**
Pulse Desktop Client	Not Affected*
Pulse Mobile Client	Not Affected*
Pulse One	Not Affected*
Pulse ZTA	Not Affected*
Ivanti Neurons for ZTA	Not Affected*
Ivanti Neurons for secure Access	Not Affected*

Note:
* Affected Library/Package not present.
** The affected Library/Package will be removed in the future releases.