DeutschShown in its original language — a full translation is planned for a future version.
Samba: Mehrere Schwachstellen
view advisory published 2022-07-26
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, einen Denial of Service Zustand zu verursachen oder seine Rechte zu erweitern.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-32746US | medium5.4 | — | ||
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-… | ||||
| CVE-2022-32745US | high8.1 | — | ||
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault. | ||||
| CVE-2022-32744US | high8.8 | — | ||
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other user… | ||||
| CVE-2022-32742US | medium4.3 | — | ||
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents… | ||||
| CVE-2022-2031US | high8.8OT elevated | — | ||
A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets.… | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2023-0838 vom 2023-02-22external
- Red Hat Security Advisory RHSA-2022:7056 vom 2022-10-20external
- Red Hat Security Advisory RHSA-2022:7111 vom 2022-10-25external
- Red Hat Security Advisory RHSA-2022:7730 vom 2022-11-08external
- Red Hat Security Advisory RHSA-2022:8317 vom 2022-11-15external
- Red Hat Security Advisory RHSA-2022:8318 vom 2022-11-15external
- Amazon Linux Security Advisory ALAS-2022-1898 vom 2022-12-07external
- Amazon Linux Security Advisory ALAS2-2023-2166 vom 2023-07-26external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan