Design/Logic Flaw

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it...

Samba 安全特征问题漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. Samba suffers from a security vulnerability that stems from the fact that GnuTLS gnutlsrnd may fail and give predictable random values...

CVE-2022-1615

CVE-2022-1615 affects Samba: the GnuTLS function gnutls_rnd() can fail and produce predictable random values, impacting Samba components that rely on that RNG. Public references in the connected docs indicate the issue is fixed in later Samba releases (e.g., Samba 4.17.5 and related advisories) a...

CVE-2022-32743

CVE-2022-32743 affects Samba; the dNSHostName attribute is not validated, potentially allowing unprivileged users to write it. Connected sources confirm the issue in Samba (4.x) and note advisories reference this CVE; one entry (CBLMARINER) states no patch is available currently. No exploitation ...

CVE-2022-32743

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it...

PT-2022-7207 · Samba +3 · Samba +3

Name of the Vulnerable Software and Affected Versions: Samba affected versions not specified Description: The issue is related to the default permission settings in Samba, a network communication package. It may allow a remote attacker to compromise data integrity. Specifically, Samba does not...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-32743

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-32743

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it...

CVE-2022-32743

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-1615

A flaw was found in Samba. When the gnutlsrnd function is called, its return value is not verified, allowing it to give predictable random values when the call to the gnutlsrnd function fails...

CVE-2022-0336

The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...

ALPINE-CVE-2022-0336

The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...

CVE-2022-0336

The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...

AZL-10741 CVE-2022-0336 affecting package samba 4.12.5-7

The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...

AZL-37009 CVE-2022-0336 affecting package samba for versions less than 4.18.3-1

The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...

DEBIAN-CVE-2022-0336

The Samba AD DC includes checks when adding service principals names SPNs to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as...