PT-2022-1496 · Samba+6 · Samba Ad Dc+7

Kees Van Vloten · Published 2022-01-31 · Updated 2024-06-15 · CVE-2022-0336

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samba AD DC (affected versions not specified)

Description The issue is related to checks when adding service principals names (SPNs) to an account, which can be bypassed under certain conditions. This can allow an attacker who has the ability to write to an account to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Insufficient Verification of Data Authenticity

Incorrect Default Permissions

Weakness Enumeration

CWE-345

CWE-276

Related Identifiers

ALT-PU-2022-1442

ALT-PU-2022-1478

ALT-PU-2023-1616

AZL-10741

AZL-37009

BDU:2022-00684

CVE-2022-0336

DSA-5071-1

ECHO-59DF-2E7F-BE70

MGASA-2022-0054

OESA-2022-1529

OPENSUSE-SU-2022:0283-1

OPENSUSE-SU-2022_0283-1

OPENSUSE-SU-2024:11807-1

SUSE-SU-2022:0283-1

SUSE-SU-2022:0323-1

USN-5260-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Red Os

Samba

Samba Ad Dc

Suse

Ubuntu

References · 78

• 🔥 https://github.com/horizon3ai/CVE-2021-44142 · Exploit
• https://github.com/samba-team/samba/commit/c58ede44f382bd0125f761f0479c8d48156be400 · Patch
• https://github.com/samba-team/samba/commit/1a5dc817c0c9379bbaab14c676681b42b0039a3c · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-0336 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0054.html · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5260-1 · Vendor Advisory
• https://samba.org/samba/security/CVE-2022-0336.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:0283-1 · Vendor Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=14950 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0336 · Security Note
• https://bdu.fstec.ru/vul/2022-00684 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2022:0283-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-10741 · Vendor Advisory