Lucene search
AmazonALAS2-2023-2166HistoryJul 20, 2023 - 5:29 p.m.
Medium: samba
2023-07-2017:29:00
alas.aws.amazon.com
12
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
5.1 Medium
AI Score
Confidence
High
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.038 Low
EPSS
Percentile
91.7%
Issue Overview:
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer). (CVE-2022-32742)
Affected Packages:
samba
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update samba to update your system.
New Packages:
aarch64:
samba-4.10.16-24.amzn2.0.2.aarch64
samba-client-4.10.16-24.amzn2.0.2.aarch64
samba-client-libs-4.10.16-24.amzn2.0.2.aarch64
samba-common-libs-4.10.16-24.amzn2.0.2.aarch64
samba-common-tools-4.10.16-24.amzn2.0.2.aarch64
samba-dc-4.10.16-24.amzn2.0.2.aarch64
samba-dc-libs-4.10.16-24.amzn2.0.2.aarch64
samba-devel-4.10.16-24.amzn2.0.2.aarch64
samba-krb5-printing-4.10.16-24.amzn2.0.2.aarch64
samba-libs-4.10.16-24.amzn2.0.2.aarch64
libsmbclient-4.10.16-24.amzn2.0.2.aarch64
libsmbclient-devel-4.10.16-24.amzn2.0.2.aarch64
libwbclient-4.10.16-24.amzn2.0.2.aarch64
libwbclient-devel-4.10.16-24.amzn2.0.2.aarch64
samba-python-4.10.16-24.amzn2.0.2.aarch64
samba-python-test-4.10.16-24.amzn2.0.2.aarch64
samba-test-4.10.16-24.amzn2.0.2.aarch64
samba-test-libs-4.10.16-24.amzn2.0.2.aarch64
samba-winbind-4.10.16-24.amzn2.0.2.aarch64
samba-winbind-clients-4.10.16-24.amzn2.0.2.aarch64
samba-winbind-krb5-locator-4.10.16-24.amzn2.0.2.aarch64
samba-winbind-modules-4.10.16-24.amzn2.0.2.aarch64
ctdb-4.10.16-24.amzn2.0.2.aarch64
ctdb-tests-4.10.16-24.amzn2.0.2.aarch64
samba-debuginfo-4.10.16-24.amzn2.0.2.aarch64
i686:
samba-4.10.16-24.amzn2.0.2.i686
samba-client-4.10.16-24.amzn2.0.2.i686
samba-client-libs-4.10.16-24.amzn2.0.2.i686
samba-common-libs-4.10.16-24.amzn2.0.2.i686
samba-common-tools-4.10.16-24.amzn2.0.2.i686
samba-dc-4.10.16-24.amzn2.0.2.i686
samba-dc-libs-4.10.16-24.amzn2.0.2.i686
samba-devel-4.10.16-24.amzn2.0.2.i686
samba-krb5-printing-4.10.16-24.amzn2.0.2.i686
samba-libs-4.10.16-24.amzn2.0.2.i686
libsmbclient-4.10.16-24.amzn2.0.2.i686
libsmbclient-devel-4.10.16-24.amzn2.0.2.i686
libwbclient-4.10.16-24.amzn2.0.2.i686
libwbclient-devel-4.10.16-24.amzn2.0.2.i686
samba-python-4.10.16-24.amzn2.0.2.i686
samba-python-test-4.10.16-24.amzn2.0.2.i686
samba-test-4.10.16-24.amzn2.0.2.i686
samba-test-libs-4.10.16-24.amzn2.0.2.i686
samba-winbind-4.10.16-24.amzn2.0.2.i686
samba-winbind-clients-4.10.16-24.amzn2.0.2.i686
samba-winbind-krb5-locator-4.10.16-24.amzn2.0.2.i686
samba-winbind-modules-4.10.16-24.amzn2.0.2.i686
ctdb-4.10.16-24.amzn2.0.2.i686
ctdb-tests-4.10.16-24.amzn2.0.2.i686
samba-debuginfo-4.10.16-24.amzn2.0.2.i686
noarch:
samba-common-4.10.16-24.amzn2.0.2.noarch
samba-pidl-4.10.16-24.amzn2.0.2.noarch
src:
samba-4.10.16-24.amzn2.0.2.src
x86_64:
samba-4.10.16-24.amzn2.0.2.x86_64
samba-client-4.10.16-24.amzn2.0.2.x86_64
samba-client-libs-4.10.16-24.amzn2.0.2.x86_64
samba-common-libs-4.10.16-24.amzn2.0.2.x86_64
samba-common-tools-4.10.16-24.amzn2.0.2.x86_64
samba-dc-4.10.16-24.amzn2.0.2.x86_64
samba-dc-libs-4.10.16-24.amzn2.0.2.x86_64
samba-devel-4.10.16-24.amzn2.0.2.x86_64
samba-vfs-glusterfs-4.10.16-24.amzn2.0.2.x86_64
samba-krb5-printing-4.10.16-24.amzn2.0.2.x86_64
samba-libs-4.10.16-24.amzn2.0.2.x86_64
libsmbclient-4.10.16-24.amzn2.0.2.x86_64
libsmbclient-devel-4.10.16-24.amzn2.0.2.x86_64
libwbclient-4.10.16-24.amzn2.0.2.x86_64
libwbclient-devel-4.10.16-24.amzn2.0.2.x86_64
samba-python-4.10.16-24.amzn2.0.2.x86_64
samba-python-test-4.10.16-24.amzn2.0.2.x86_64
samba-test-4.10.16-24.amzn2.0.2.x86_64
samba-test-libs-4.10.16-24.amzn2.0.2.x86_64
samba-winbind-4.10.16-24.amzn2.0.2.x86_64
samba-winbind-clients-4.10.16-24.amzn2.0.2.x86_64
samba-winbind-krb5-locator-4.10.16-24.amzn2.0.2.x86_64
samba-winbind-modules-4.10.16-24.amzn2.0.2.x86_64
ctdb-4.10.16-24.amzn2.0.2.x86_64
ctdb-tests-4.10.16-24.amzn2.0.2.x86_64
samba-debuginfo-4.10.16-24.amzn2.0.2.x86_64
Additional References
Red Hat: CVE-2022-32742
Mitre: CVE-2022-32742
Related
oraclelinux
oraclelinux
samba security, bug fix, and enhancement update
2022-11-22 00:00:00
samba security and bug fix update
2022-10-26 00:00:00
suse
suse
Security update for samba (moderate)
2022-08-03 00:00:00
Security update for samba (moderate)
2022-08-02 00:00:00
Security update for ldb, samba (important)
2022-08-03 00:00:00
veracode
veracode
Information Disclosure
2022-08-04 03:05:51
nessus
nessus
Rocky Linux 9 : samba (RLSA-2022:8317)
2023-11-06 00:00:00
EulerOS Virtualization 3.0.2.0 : samba (EulerOS-SA-2023-1752)
2023-05-06 00:00:00
SUSE SLES15 Security Update : samba (SUSE-SU-2022:2621-1)
2022-08-02 00:00:00
rocky
rocky
samba security and bug fix update
2022-10-25 07:24:06
samba security, bug fix, and enhancement update
2022-11-15 06:21:30
redhat
redhat
(RHSA-2022:8317) Moderate: samba security, bug fix, and enhancement update
2022-11-15 06:21:30
(RHSA-2022:7111) Moderate: samba security and bug fix update
2022-10-25 07:24:06
(RHSA-2022:7056) Moderate: samba security, bug fix and enhancement update
2022-10-19 13:50:03
cve
cve
CVE-2022-32742
2022-08-25 18:15:10
osv
osv
Moderate: samba security and bug fix update
2022-10-25 00:00:00
Moderate: samba security, bug fix, and enhancement update
2022-11-15 00:00:00
CVE-2022-32742
2022-08-25 18:15:10
ubuntucve
ubuntucve
CVE-2022-32742
2022-07-27 00:00:00
redhatcve
redhatcve
CVE-2022-32742
2022-07-27 15:54:52
openvas
openvas
openSUSE: Security Advisory for samba (SUSE-SU-2022:2651-1)
2022-08-04 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-2449)
2022-10-10 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:2621-1)
2022-08-03 00:00:00
almalinux
almalinux
Moderate: samba security, bug fix, and enhancement update
2022-11-15 00:00:00
Moderate: samba security and bug fix update
2022-10-25 00:00:00
ibm
ibm
debiancve
debiancve
CVE-2022-32742
2022-08-25 18:15:10
samba
samba
Server memory information leak via SMB1.
2022-07-27 00:00:00
zdi
zdi
Samba SMB1 Out-Of-Bounds Read Information Disclosure Vulnerability
2023-05-24 00:00:00
alpinelinux
alpinelinux
CVE-2022-32742
2022-08-25 18:15:10
prion
prion
Design/Logic Flaw
2022-08-25 18:15:00
cbl_mariner
cbl_mariner
CVE-2022-32742 affecting package samba 4.12.5-6
2024-04-28 09:06:18
fedora
fedora
[SECURITY] Fedora 35 Update: libldb-2.4.4-1.fc35
2022-08-14 03:01:36
[SECURITY] Fedora 36 Update: samba-4.16.4-0.fc36
2022-07-31 01:38:52
[SECURITY] Fedora 36 Update: libldb-2.5.2-1.fc36
2022-07-31 01:38:52
redos
redos
ROS-20220808-01
2022-08-08 00:00:00
freebsd
freebsd
samba -- Multiple vulnerabilities
2022-07-27 00:00:00
cisa
cisa
Samba Releases Security Updates
2022-07-27 00:00:00
f5
f5
K21571420 : Multiple Samba vulnerabilities
2022-08-05 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.15.9-alt1
2022-08-15 00:00:00
debian
debian
[SECURITY] [DSA 5205-1] samba security update
2022-08-11 19:16:47
[SECURITY] [DLA 3792-1] samba security update
2024-04-22 15:05:00
mageia
mageia
Updated ldb/samba/sssd packages fix security vulnerability
2022-08-26 00:21:07
amazon
amazon
Important: samba
2022-12-01 17:33:00
slackware
slackware
[slackware-security] samba
2022-07-27 19:20:14
ubuntu
ubuntu
Samba vulnerabilities
2022-08-01 00:00:00
gentoo
gentoo
Samba: Multiple Vulnerabilities
2023-09-17 00:00:00
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
5.1 Medium
AI Score
Confidence
High
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
0.038 Low
EPSS
Percentile
91.7%
Related for ALAS2-2023-2166