https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 23:02:34 +0000 https://cve.radiocsirt.org/vuln/alsa-2022:7111 <p><strong>Affected:</strong> AlmaLinux:8: ctdb, AlmaLinux:8: libsmbclient, AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: python3-samba, AlmaLinux:8: python3-samba-test, AlmaLinux:8: samba, AlmaLinux:8: samba-client, AlmaLinux:8: samba-client-libs and 15 more</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: server memory information leak via SMB1 (CVE-2022-32742)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fix(es):</p> <p>* python3-samba requires samba and that is a bug (BZ#2126041)</p> <p><strong>Affected:</strong> AlmaLinux:8: ctdb, AlmaLinux:8: libsmbclient, AlmaLinux:8: libsmbclient-devel, AlmaLinux:8: libwbclient, AlmaLinux:8: libwbclient-devel, AlmaLinux:8: python3-samba, AlmaLinux:8: python3-samba-test, AlmaLinux:8: samba, AlmaLinux:8: samba-client, AlmaLinux:8: samba-client-libs and 15 more</p> <p>Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.</p> <p>Security Fix(es):</p> <p>* samba: server memory information leak via SMB1 (CVE-2022-32742)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Bug Fix(es):</p> <p>* python3-samba requires samba and that is a bug (BZ#2126041)</p> https://cve.radiocsirt.org/vuln/alsa-2022:7111 https://cve.radiocsirt.org/vuln/bdu:2022-04977 bdu:2022-04977 https://cve.radiocsirt.org/vuln/bdu:2022-04977 https://cve.radiocsirt.org/vuln/certfr-2022-avi-686 certfr-2022-avi-686 https://cve.radiocsirt.org/vuln/certfr-2022-avi-686 https://cve.radiocsirt.org/vuln/euvd-2026-17428 EUVD-2026-17428 https://cve.radiocsirt.org/vuln/euvd-2026-17428 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32742 <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).</p> <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-32742 https://cve.radiocsirt.org/vuln/ghsa-j7gp-2jqv-76gj <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).</p> <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).</p> https://cve.radiocsirt.org/vuln/ghsa-j7gp-2jqv-76gj https://cve.radiocsirt.org/vuln/gsd-2022-32742 gsd-2022-32742 https://cve.radiocsirt.org/vuln/gsd-2022-32742 https://cve.radiocsirt.org/vuln/msrc_cve-2022-32742 msrc_CVE-2022-32742 https://cve.radiocsirt.org/vuln/msrc_cve-2022-32742 https://cve.radiocsirt.org/vuln/oesa-2022-1798 <p><strong>Affected:</strong> openEuler:22.03-LTS: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.(CVE-2022-32745)</p> <p>A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.(CVE-2022-32746)</p> <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).(CVE-2022-32742)</p> <p>A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users passwords, enabling full domain takeover.(CVE-2022-32744)</p> <p>As per samba upstream advisory:All versions of Samba prior to 4.16.x built with Heimdal Kerberos are vulnerable to an Elevation of Privilege attack. If the password of a user expires and need to be changed, a user could get a krbtgt using kpasswd with canonicalization turned on. The KDC sh…</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: samba</p> <p>Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fix(es): A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.(CVE-2022-32745)</p> <p>A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.(CVE-2022-32746)</p> <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).(CVE-2022-32742)</p> <p>A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users passwords, enabling full domain takeover.(CVE-2022-32744)</p> <p>As per samba upstream advisory:All versions of Samba prior to 4.16.x built with Heimdal Kerberos are vulnerable to an Elevation of Privilege attack. If the password of a user expires and need to be changed, a user could get a krbtgt using kpasswd with canonicalization turned on. The KDC sh…</p> https://cve.radiocsirt.org/vuln/oesa-2022-1798 https://cve.radiocsirt.org/vuln/rhsa-2022:7056 <p>samba: server memory information leak via SMB1</p> <p>samba: server memory information leak via SMB1</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7056 https://cve.radiocsirt.org/vuln/rhsa-2022:7111 <p>samba: server memory information leak via SMB1</p> <p>samba: server memory information leak via SMB1</p> https://cve.radiocsirt.org/vuln/rhsa-2022:7111 https://cve.radiocsirt.org/vuln/suse-su-2023:0122-1 <p>Security update for samba</p> <p>Security update for samba</p> https://cve.radiocsirt.org/vuln/suse-su-2023:0122-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-32742 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba</p> <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:20.04:LTS: samba, Ubuntu:22.04:LTS: samba</p> <p>A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-32742 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0842 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, einen Denial of Service Zustand zu verursachen oder seine Rechte zu erweitern.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, einen Denial of Service Zustand zu verursachen oder seine Rechte zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0842