rpm package
opensuse/samba&distro=openSUSE Leap 15.4
pkg:rpm/opensuse/samba&distro=openSUSE%20Leap%2015.4
Vulnerabilities (24)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-32744 | — | < 4.15.8+git.500.d5910280cc7-150400.3.11.1 | 4.15.8+git.500.d5910280cc7-150400.3.11.1 | Aug 25, 2022 | A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover. | ||
| CVE-2022-32742 | — | < 4.9.5+git.490.e80cf669f50-150100.3.70.1 | 4.9.5+git.490.e80cf669f50-150100.3.70.1 | Aug 25, 2022 | A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control | ||
| CVE-2022-2031 | — | < 4.15.8+git.500.d5910280cc7-150400.3.11.1 | 4.15.8+git.500.d5910280cc7-150400.3.11.1 | Aug 25, 2022 | A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tic | ||
| CVE-2021-3670 | — | < 4.15.7+git.376.dd43aca9ab2-150400.3.5.3 | 4.15.7+git.376.dd43aca9ab2-150400.3.5.3 | Aug 23, 2022 | MaxQueryDuration not honoured in Samba AD DC LDAP |
- CVE-2022-32744Aug 25, 2022affected < 4.15.8+git.500.d5910280cc7-150400.3.11.1fixed 4.15.8+git.500.d5910280cc7-150400.3.11.1
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
- CVE-2022-32742Aug 25, 2022affected < 4.9.5+git.490.e80cf669f50-150100.3.70.1fixed 4.9.5+git.490.e80cf669f50-150100.3.70.1
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control
- CVE-2022-2031Aug 25, 2022affected < 4.15.8+git.500.d5910280cc7-150400.3.11.1fixed 4.15.8+git.500.d5910280cc7-150400.3.11.1
A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tic
- CVE-2021-3670Aug 23, 2022affected < 4.15.7+git.376.dd43aca9ab2-150400.3.5.3fixed 4.15.7+git.376.dd43aca9ab2-150400.3.5.3
MaxQueryDuration not honoured in Samba AD DC LDAP
Page 2 of 2