Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2022-2127

Published: 19 July 2023

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.

Priority

Medium

Cvss 3 Severity Score

5.9

Score breakdown

Status

Package Release Status
samba
Launchpad, Ubuntu, Debian
trusty Needs triage

xenial Needs triage

bionic Needs triage

focal
Released (2:4.15.13+dfsg-0ubuntu0.20.04.3)
jammy
Released (2:4.15.13+dfsg-0ubuntu1.2)
kinetic
Released (2:4.16.8+dfsg-0ubuntu1.2)
lunar
Released (2:4.17.7+dfsg-1ubuntu1.1)
upstream Needs triage

Severity score breakdown

Parameter Value
Base score 5.9
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Scope Unchanged
Confidentiality None
Integrity impact None
Availability impact High
Vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H