Поиск уязвимостей
Количество 23
Количество 23
CVE-2022-2127
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
CVE-2022-2127
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
CVE-2022-2127
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
CVE-2022-2127
An out-of-bounds read vulnerability was found in Samba due to insuffic ...
SUSE-SU-2023:3358-1
Security update for samba
SUSE-SU-2023:3017-1
Security update for samba
SUSE-SU-2023:2887-1
Security update for samba
GHSA-mfwc-hx97-869v
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
BDU:2023-03963
Уязвимость компонента winbindd_pam_auth_crap.c пакета программ сетевого взаимодействия Samba, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2023-8691
ALT-PU-2023-8691: package `samba` update to version 4.17.9-alt1
SUSE-SU-2023:3060-1
Security update for samba
SUSE-SU-2023:2930-1
Security update for samba
SUSE-SU-2023:2888-1
Security update for samba
RLSA-2023:7139
Moderate: samba security, bug fix, and enhancement update
ELSA-2023-7139
ELSA-2023-7139: samba security, bug fix, and enhancement update (MODERATE)
ELSA-2023-6667
ELSA-2023-6667: samba security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2023:2929-1
Security update for samba
ALT-PU-2023-4520
ALT-PU-2023-4520: package `samba` update to version 4.16.11-alt2
ALT-PU-2023-1618
ALT-PU-2023-1618: package `samba` update to version 4.16.10-alt1
ROS-20230920-02
Множественные уязвимости samba
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-2127 An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash. | CVSS3: 5.9 | 2% Низкий | больше 3 лет назад |
 | CVE-2022-2127 An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash. | CVSS3: 5.9 | 2% Низкий | больше 3 лет назад |
 | CVE-2022-2127 An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash. | CVSS3: 5.9 | 2% Низкий | больше 3 лет назад |
| CVE-2022-2127 An out-of-bounds read vulnerability was found in Samba due to insuffic ... | CVSS3: 5.9 | 2% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:3358-1 Security update for samba | 2% Низкий | около 3 лет назад | |
| SUSE-SU-2023:3017-1 Security update for samba | 2% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:2887-1 Security update for samba | 2% Низкий | больше 3 лет назад | |
| GHSA-mfwc-hx97-869v An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash. | CVSS3: 5.9 | 2% Низкий | больше 3 лет назад |
 | BDU:2023-03963 Уязвимость компонента winbindd_pam_auth_crap.c пакета программ сетевого взаимодействия Samba, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 2% Низкий | больше 3 лет назад |
| ALT-PU-2023-8691 ALT-PU-2023-8691: package `samba` update to version 4.17.9-alt1 | CVSS3: 7.5 | 2% Низкий | больше 3 лет назад |
| SUSE-SU-2023:3060-1 Security update for samba | больше 3 лет назад | ||
| SUSE-SU-2023:2930-1 Security update for samba | больше 3 лет назад | ||
| SUSE-SU-2023:2888-1 Security update for samba | больше 3 лет назад | ||
 | RLSA-2023:7139 Moderate: samba security, bug fix, and enhancement update | 5 месяцев назад | ||
| ELSA-2023-7139 ELSA-2023-7139: samba security, bug fix, and enhancement update (MODERATE) | почти 3 года назад | ||
| ELSA-2023-6667 ELSA-2023-6667: samba security, bug fix, and enhancement update (MODERATE) | почти 3 года назад | ||
| SUSE-SU-2023:2929-1 Security update for samba | больше 3 лет назад | ||
| ALT-PU-2023-4520 ALT-PU-2023-4520: package `samba` update to version 4.16.11-alt2 | CVSS3: 7.5 | больше 3 лет назад | |
| ALT-PU-2023-1618 ALT-PU-2023-1618: package `samba` update to version 4.16.10-alt1 | CVSS3: 7.5 | больше 3 лет назад | |
 | ROS-20230920-02 Множественные уязвимости samba | CVSS3: 7.5 | почти 3 года назад |
Уязвимостей на страницу