https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:08:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-00684 bdu:2022-00684 https://cve.radiocsirt.org/vuln/bdu:2022-00684 https://cve.radiocsirt.org/vuln/certfr-2022-avi-096 certfr-2022-avi-096 https://cve.radiocsirt.org/vuln/certfr-2022-avi-096 https://cve.radiocsirt.org/vuln/euvd-2026-10863 EUVD-2026-10863 https://cve.radiocsirt.org/vuln/euvd-2026-10863 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0336 <p>The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.</p> <p>The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0336 https://cve.radiocsirt.org/vuln/ghsa-rg44-hwh5-vcpq <p>The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.</p> <p>The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ghsa-rg44-hwh5-vcpq https://cve.radiocsirt.org/vuln/gsd-2022-0336 gsd-2022-0336 https://cve.radiocsirt.org/vuln/gsd-2022-0336 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0336 msrc_CVE-2022-0336 https://cve.radiocsirt.org/vuln/msrc_cve-2022-0336 https://cve.radiocsirt.org/vuln/oesa-2022-1529 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: samba, openEuler:20.03-LTS-SP2: samba, openEuler:20.03-LTS-SP3: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): Checks in Samba AD DC to prevent alias SPNs may be bypassed, enabling users who can write to the account&#39;s servicePrincipalName attribute to impersonate the service.(CVE-2022-0336)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: samba, openEuler:20.03-LTS-SP2: samba, openEuler:20.03-LTS-SP3: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): Checks in Samba AD DC to prevent alias SPNs may be bypassed, enabling users who can write to the account&#39;s servicePrincipalName attribute to impersonate the service.(CVE-2022-0336)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1529 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0336 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: samba</p> <p>The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: samba</p> <p>The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0336 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0302