PT-2022-7207 · Samba+3 · Samba+3

Andrew Bartlett · Published 2022-09-01 · Updated 2025-08-22 · CVE-2022-32743

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description The issue is related to the default permission settings in Samba, a network communication package. It may allow a remote attacker to compromise data integrity. Specifically, Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute, which could permit unprivileged users to write it.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

AZL-10865

BDU:2023-09090

CVE-2022-32743

ECHO-FC0C-9842-9114

OESA-2022-1878

OPENSUSE-SU-2022_3244-1

OPENSUSE-SU-2022_3955-1

SUSE-SU-2022:3244-1

SUSE-SU-2022:3955-1

Affected Products

Astra Linux

Debian

Samba

Suse

References · 32

• 🔥 https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/5c578b15-d619-408d-ba17-380714b89fd1 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2022:3955-1 · Vendor Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=14833 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1878 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32743 · Security Note
• https://osv.dev/vulnerability/CVE-2022-32743 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-32743 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:3244-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-09090 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-32743 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-10865 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-32743 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTTOLTHUHOV4SHCHCB5TAA4FQVJAWN4P · Vendor Advisory