CVE-2022-1615

Опубликовано: 01 сент. 2022

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

Ссылки

https://bugzilla.samba.org/show_bug.cgi?id=15103
Exploit
Issue Tracking
Vendor Advisory
https://gitlab.com/samba-team/samba/-/merge_requests/2644
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTTOLTHUHOV4SHCHCB5TAA4FQVJAWN4P/
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202309-06
Third Party Advisory
https://bugzilla.samba.org/show_bug.cgi?id=15103
Exploit
Issue Tracking
Vendor Advisory
https://gitlab.com/samba-team/samba/-/merge_requests/2644
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTTOLTHUHOV4SHCHCB5TAA4FQVJAWN4P/
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202309-06
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Версия от 4.1.0 (включая) до 4.17.0 (исключая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

EPSS

Процентиль: 32%

0.00121

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-330

Связанные уязвимости

CVE-2022-1615

CVSS3: 5.5

ubuntu

около 3 лет назад

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

CVE-2022-1615

CVSS3: 5.1

redhat

около 3 лет назад

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

CVE-2022-1615

CVSS3: 5.5

debian

около 3 лет назад

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random val ...

SUSE-SU-2022:3270-1

suse-cvrf

почти 3 года назад

Security update for samba

GHSA-hhph-6qvj-8859

CVSS3: 5.5

github

около 3 лет назад

In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.

EPSS

Процентиль: 32%

0.00121

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-330