rpm package
suse/samba&distro=SUSE Linux Enterprise High Availability Extension 15 SP4
pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP4
Vulnerabilities (26)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-32746 | Med | 5.4 | < 4.15.8+git.500.d5910280cc7-150400.3.11.1 | 4.15.8+git.500.d5910280cc7-150400.3.11.1 | Aug 25, 2022 | A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAc | |
| CVE-2022-32745 | Hig | 8.1 | < 4.15.8+git.500.d5910280cc7-150400.3.11.1 | 4.15.8+git.500.d5910280cc7-150400.3.11.1 | Aug 25, 2022 | A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault. | |
| CVE-2022-32744 | Hig | 8.8 | < 4.15.8+git.500.d5910280cc7-150400.3.11.1 | 4.15.8+git.500.d5910280cc7-150400.3.11.1 | Aug 25, 2022 | A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover. | |
| CVE-2022-32742 | Med | 4.3 | < 4.15.8+git.500.d5910280cc7-150400.3.11.1 | 4.15.8+git.500.d5910280cc7-150400.3.11.1 | Aug 25, 2022 | A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control | |
| CVE-2022-2031 | Hig | 8.8 | < 4.15.8+git.500.d5910280cc7-150400.3.11.1 | 4.15.8+git.500.d5910280cc7-150400.3.11.1 | Aug 25, 2022 | A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tic | |
| CVE-2021-3670 | Med | 6.5 | < 4.15.7+git.376.dd43aca9ab2-150400.3.5.3 | 4.15.7+git.376.dd43aca9ab2-150400.3.5.3 | Aug 23, 2022 | MaxQueryDuration not honoured in Samba AD DC LDAP |
- affected < 4.15.8+git.500.d5910280cc7-150400.3.11.1fixed 4.15.8+git.500.d5910280cc7-150400.3.11.1
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAc
- affected < 4.15.8+git.500.d5910280cc7-150400.3.11.1fixed 4.15.8+git.500.d5910280cc7-150400.3.11.1
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.
- affected < 4.15.8+git.500.d5910280cc7-150400.3.11.1fixed 4.15.8+git.500.d5910280cc7-150400.3.11.1
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
- affected < 4.15.8+git.500.d5910280cc7-150400.3.11.1fixed 4.15.8+git.500.d5910280cc7-150400.3.11.1
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control
- affected < 4.15.8+git.500.d5910280cc7-150400.3.11.1fixed 4.15.8+git.500.d5910280cc7-150400.3.11.1
A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tic
- affected < 4.15.7+git.376.dd43aca9ab2-150400.3.5.3fixed 4.15.7+git.376.dd43aca9ab2-150400.3.5.3
MaxQueryDuration not honoured in Samba AD DC LDAP
Page 2 of 2