ROS-20220808-01

A vulnerability in the ActiveDirectory/DC database audit logging module of the Samba networking software suite is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service

A vulnerability in the Samba network file system is related to how the KDC kpasswd service handles password change requests. Exploitation of the vulnerability could allow an attacker acting remotely to escalate privileges on the system

A vulnerability in the memcpy() function of the Samba networking software package is related to errors in the initialization of the count variable. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality of protected information or cause a denial of service by sending specially crafted messages.

A vulnerability in the SMB1 protocol implementation of the Samba networking software package is related to an operation exceeding the buffer boundaries in memory when checking the range of requests. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service

A vulnerability in the Samba network file system is related to errors in the authentication procedure. Exploitation of the vulnerability could allow a remote attacker to change the password of an arbitrary user and gain full access to the account.