CVE-2022-3437

2022-10-2700:00:00

ubuntu.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.01 Low

EPSS

Percentile

83.5%

JSON

A heap-based buffer overflow vulnerability was found in Samba within the
GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and
Triple-DES decryption routines in the Heimdal GSSAPI library allow a
length-limited write buffer overflow on malloc() allocated memory when
presented with a maliciously small packet. This flaw allows a remote user
to send specially crafted malicious data to the application, possibly
resulting in a denial of service (DoS) attack.

Bugs

Notes

Author	Note
mdeslaur	The focal samba update was temporarily reverted by USN 5822-2 because it introduced regressions. It was later updated again with USN 5936-1.
rodrigo-zaiden	heimdal patch f6edaafc introduced a new issue, assigned as CVE-2022-45142.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchheimdal< 7.5.0+dfsg-1ubuntu0.3UNKNOWN
ubuntu20.04noarchheimdal< 7.7.0+dfsg-1ubuntu1.3UNKNOWN
ubuntu22.04noarchheimdal< anyUNKNOWN
ubuntu14.04noarchheimdal< 1.6~git20131207+dfsg-1ubuntu1.2+esm3) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu16.04noarchheimdal< 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu18.04noarchsamba< anyUNKNOWN
ubuntu20.04noarchsamba< 2:4.15.13+dfsg-0ubuntu0.20.04.1UNKNOWN
ubuntu22.04noarchsamba< 2:4.15.13+dfsg-0ubuntu1UNKNOWN
ubuntu22.10noarchsamba< 2:4.16.8+dfsg-0ubuntu1UNKNOWN
ubuntu23.04noarchsamba< 2:4.17.3+dfsg-3ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	heimdal	< 7.5.0+dfsg-1ubuntu0.3	UNKNOWN
ubuntu	20.04	noarch	heimdal	< 7.7.0+dfsg-1ubuntu1.3	UNKNOWN
ubuntu	22.04	noarch	heimdal	< any	UNKNOWN
ubuntu	14.04	noarch	heimdal	< 1.6~git20131207+dfsg-1ubuntu1.2+esm3) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	16.04	noarch	heimdal	< 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	18.04	noarch	samba	< any	UNKNOWN
ubuntu	20.04	noarch	samba	< 2:4.15.13+dfsg-0ubuntu0.20.04.1	UNKNOWN
ubuntu	22.04	noarch	samba	< 2:4.15.13+dfsg-0ubuntu1	UNKNOWN
ubuntu	22.10	noarch	samba	< 2:4.16.8+dfsg-0ubuntu1	UNKNOWN
ubuntu	23.04	noarch	samba	< 2:4.17.3+dfsg-3ubuntu1	UNKNOWN