PT-2022-4426 · Samba+6 · Samba+6

Luke Howard · Published 2022-07-27 · Updated 2024-11-15 · CVE-2022-2031

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description A flaw in Samba occurs when the KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. This issue is related to the authentication procedure and how the KDC kpasswd service handles password change requests. A user who has been requested to change their password can exploit this flaw to obtain and use tickets to other services, potentially allowing a remote attacker to elevate privileges in the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Weakness Enumeration

CWE-288

CWE-287

CWE-304

Related Identifiers

ALT-PU-2022-2322

ALT-PU-2022-2438

ALT-PU-2023-1616

ALT-PU-2024-14683

AZL-10735

AZL-37011

BDU:2022-05290

CVE-2022-2031

DSA-5205-1

MGASA-2022-0299

OESA-2022-1798

OESA-2022-1816

OESA-2022-1817

OPENSUSE-SU-2022_2586-1

OPENSUSE-SU-2022_2659-1

OPENSUSE-SU-2022_4395-1

OPENSUSE-SU-2023_0160-1

OPENSUSE-SU-2024:12243-1

SUSE-SU-2022:2582-1

SUSE-SU-2022:2586-1

SUSE-SU-2022:2586-2

SUSE-SU-2022:2659-1

SUSE-SU-2022:4395-1

SUSE-SU-2022_2582-1

SUSE-SU-2022_2586-1

SUSE-SU-2022_2659-1

SUSE-SU-2022_4395-1

SUSE-SU-2023:0081-1

SUSE-SU-2023:0160-1

SUSE-SU-2023_0081-1

USN-5542-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Red Os

Samba

Suse

Ubuntu

References · 100

• 🔥 https://github.com/horizon3ai/CVE-2021-44142 · Exploit
• https://samba.org/samba/security/CVE-2022-2031.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32744 · Security Note
• https://ubuntu.com/security/CVE-2022-32744 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0081-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-1121SE47 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-10735 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5205-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32742 · Security Note
• https://osv.dev/vulnerability/OESA-2022-1798 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2582-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-2031 · Security Note
• https://osv.dev/vulnerability/CVE-2022-2031 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/2RORIRLFLRNQOCVXQU4V3RLZ5C2G75L2 · Vendor Advisory