PT-2022-4079 · Samba+6 · Samba+6

Joseph Sutton · Published 2022-07-18 · Updated 2024-11-15 · CVE-2022-32745

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description A flaw was found in Samba, where Samba AD users can cause the server to access uninitialized data with an LDAP add or modify request, usually resulting in a segmentation fault. The vulnerability is related to errors in initializing the count variable in the memcpy() function. Exploitation of the vulnerability may allow a remote attacker to impact the confidentiality of protected information or cause a denial of service by sending specially crafted messages.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Use of Uninitialized Resource

Buffer Overflow

Weakness Enumeration

CWE-457

CWE-125

CWE-908

CWE-119

Related Identifiers

ALT-PU-2022-2322

ALT-PU-2022-2438

ALT-PU-2023-1616

ALT-PU-2024-14683

AZL-44790

BDU:2022-04913

CVE-2022-32745

DSA-5205-1

ECHO-9F43-B0B4-B84F

MGASA-2022-0299

OESA-2022-1798

OPENSUSE-SU-2022_2586-1

OPENSUSE-SU-2022_2659-1

OPENSUSE-SU-2022_4395-1

OPENSUSE-SU-2023_0160-1

OPENSUSE-SU-2024:12243-1

SUSE-SU-2022:2582-1

SUSE-SU-2022:2586-1

SUSE-SU-2022:2586-2

SUSE-SU-2022:2659-1

SUSE-SU-2022:4395-1

SUSE-SU-2023:0081-1

SUSE-SU-2023:0160-1

USN-5542-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Red Os

Samba

Suse

Ubuntu

References · 96

• 🔥 https://github.com/horizon3ai/CVE-2021-44142 · Exploit
• https://osv.dev/vulnerability/DSA-5205-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2659-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32745 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-2031 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-32746 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0160-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32745 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-1121SE47 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32742 · Security Note
• https://security.gentoo.org/glsa/202309-06 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3670 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-32745 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2582-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-32745 · Vendor Advisory