https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 06:49:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05290 bdu:2022-05290 https://cve.radiocsirt.org/vuln/bdu:2022-05290 https://cve.radiocsirt.org/vuln/certfr-2022-avi-686 certfr-2022-avi-686 https://cve.radiocsirt.org/vuln/certfr-2022-avi-686 https://cve.radiocsirt.org/vuln/euvd-2026-12118 EUVD-2026-12118 https://cve.radiocsirt.org/vuln/euvd-2026-12118 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2031 <p>A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other&#39;s tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services.</p> <p>A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other&#39;s tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2031 https://cve.radiocsirt.org/vuln/ghsa-rprh-2gf9-vfmv <p>A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other&#39;s tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services.</p> <p>A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other&#39;s tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services.</p> https://cve.radiocsirt.org/vuln/ghsa-rprh-2gf9-vfmv https://cve.radiocsirt.org/vuln/gsd-2022-2031 gsd-2022-2031 https://cve.radiocsirt.org/vuln/gsd-2022-2031 https://cve.radiocsirt.org/vuln/msrc_cve-2022-2031 msrc_CVE-2022-2031 https://cve.radiocsirt.org/vuln/msrc_cve-2022-2031 https://cve.radiocsirt.org/vuln/oesa-2022-1798 <p><strong>Affected:</strong> openEuler:22.03-LTS: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.(CVE-2022-32745)</p> <p>A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.(CVE-2022-32746)</p> <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).(CVE-2022-32742)</p> <p>A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users passwords, enabling full domain takeover.(CVE-2022-32744)</p> <p>As per samba upstream advisory:All versions of Samba prior to 4.16.x built with Heimdal Kerberos are vulnerable to an Elevation of Privilege attack. If the password of a user expires and need to be changed, a user could get a krbtgt using kpasswd with canonicalization turned on. The KDC sh…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.(CVE-2022-32745)</p> <p>A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.(CVE-2022-32746)</p> <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).(CVE-2022-32742)</p> <p>A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users passwords, enabling full domain takeover.(CVE-2022-32744)</p> <p>As per samba upstream advisory:All versions of Samba prior to 4.16.x built with Heimdal Kerberos are vulnerable to an Elevation of Privilege attack. If the password of a user expires and need to be changed, a user could get a krbtgt using kpasswd with canonicalization turned on. The KDC sh…</p> https://cve.radiocsirt.org/vuln/oesa-2022-1798 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2031 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba</p> <p>A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other&#39;s tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba</p> <p>A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other&#39;s tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-2031 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0842 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, einen Denial of Service Zustand zu verursachen oder seine Rechte zu erweitern.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, einen Denial of Service Zustand zu verursachen oder seine Rechte zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0842