The vulnerability of the KDC kpasswd service in the Samba networking software allows a hacker to elevate their privileges within the system.

The vulnerability of the KDC kpasswd service in the Samba networking software package is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to elevate privileges within the system...

CVE-2022-32742

A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file or printer instead of client-supplied data. The client cannot control the area of the...

CVE-2022-32745

CVE-2022-32745 is a Samba flaw in the Samba AD LDAP server where LDAP add/modify requests can cause the server to access uninitialized data, usually triggering a segmentation fault. Affected are Samba AD users; the underlying issue is uninitialized data access. The issue is mitigated by upgrading...

CVE-2022-2031

A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other...

CVE-2022-32744

CVE-2022-32744 concerns Samba’s Kerberos KDC, where forged kpasswd requests can be encrypted with any key, allowing password changes for other users and potentially full domain takeover. Affected software is Samba (KDC/Auth components). The root cause is improper validation of kpasswd requests, e...

CVE-2022-32742

The CVE-2022-32742 entry describes a Samba SMB1 write flaw where SMB1 write requests were not correctly range-checked, allowing server memory contents to be written into the target file/printer instead of client data. The client cannot control the server memory area written. Concrete details appe...

CVE-2022-32745

A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault...

CVE-2022-2031

A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other...

CVE-2022-32746

CVE-2022-32746 affects the Samba AD LDAP server, specifically the AD DC database audit logging module, enabling a use-after-free when modifying privileged attributes (e.g., userAccountControl). The issue is triggered by accessing LDAP message values freed by a preceding database module. Impact de...

CVE-2022-32744

A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover...

CVE-2022-2031

A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other...

CVE-2022-32744

A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover...

CVE-2022-32744

A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover...

CVE-2022-32744

A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover...

CVE-2022-32743

A flaw was found in samba that validates the domain name system's host name. This issue links a trailing $ to objectclass=computer, which helps avoid the creation of SPN values that collide with other, possibly privileged hosts...

Samba 安全漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba that stems from not verifying the write permission of dnsHostname...

ROS-20220808-01

A vulnerability in the ActiveDirectory/DC database audit logging module of the Samba networking software suite is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service A vulnerability in the Samba...

CVE-2021-3670

MaxQueryDuration not honoured in Samba AD DC LDAP...

DEBIAN-CVE-2021-3670

MaxQueryDuration not honoured in Samba AD DC LDAP...

CVE-2021-20316

A flaw was found in the way Samba handled file/directory metadata. This flaw allows an authenticated attacker with permissions to read or modify share metadata, to perform this operation outside of the share...