PT-2022-3881 · Samba+6 · Samba+6

Joseph Sutton · Published 2022-07-18 · Updated 2024-11-15 · CVE-2022-32744

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description The issue is related to errors during the authentication procedure in the Samba network file system. It allows a remote attacker to change the password of any user and gain full access to the account. Specifically, the Key Distribution Center (KDC) in Samba accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Buffer Overflow

Use After Free

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-125

CWE-119

CWE-457

CWE-416

CWE-320

CWE-304

CWE-290

Related Identifiers

ALT-PU-2022-2322

ALT-PU-2022-2438

ALT-PU-2023-1616

ALT-PU-2024-14683

AZL-10663

AZL-37014

BDU:2022-04687

BDU:2022-04911

BDU:2022-04913

BDU:2022-05290

CVE-2022-32744

DSA-5205-1

MGASA-2022-0299

OESA-2022-1798

OESA-2022-1816

OESA-2022-1817

OPENSUSE-SU-2022_2586-1

OPENSUSE-SU-2022_2659-1

OPENSUSE-SU-2022_4395-1

OPENSUSE-SU-2023_0160-1

OPENSUSE-SU-2024:12243-1

ROSA-SA-2022-2062

SUSE-SU-2022:2582-1

SUSE-SU-2022:2586-1

SUSE-SU-2022:2586-2

SUSE-SU-2022:2659-1

SUSE-SU-2022:4395-1

SUSE-SU-2023:0081-1

SUSE-SU-2023:0160-1

USN-5542-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Red Os

Samba

Suse

Ubuntu

References · 118

• 🔥 https://github.com/horizon3ai/CVE-2021-44142 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2023:0081-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32744 · Security Note
• https://ubuntu.com/security/CVE-2022-32744 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-1121SE47 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-32744 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-32744 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5205-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-32744 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32742 · Security Note
• https://osv.dev/vulnerability/OESA-2022-1798 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2582-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-32744 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/2RORIRLFLRNQOCVXQU4V3RLZ5C2G75L2 · Vendor Advisory