CVE-2022-32742

Published: 27 July 2022

Server memory information leak via SMB1

Notes

issue only exists in SMB1
Samba versions 4.11.0 and above disable SMB1 by default

Mitigation

This issue can be mitigated by disabling SMB1, which is the default
configuration in Samba 4.11 and above.

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32742
• https://www.samba.org/samba/security/CVE-2022-32742.html
• https://ubuntu.com/security/notices/USN-5542-1
• NVD
• Launchpad
• Debian

Bugs

• https://bugzilla.samba.org/show_bug.cgi?id=15085
• https://bugzilla.samba.org/show_bug.cgi?id=15109 (tracking bug)