Vulnerability Name: | CVE-2022-3437 (CCN-243456) | ||||||||||||
Assigned: | 2022-10-12 | ||||||||||||
Published: | 2022-10-12 | ||||||||||||
Updated: | 2023-02-16 | ||||||||||||
Summary: | Samba is vulnerable to a buffer overflow, caused by improper bounds checking by the Heimdal unwrap_des3() function. By sending a specially-crafted packet, a remote authenticated attacker could overflow a buffer and execute arbitrary code or cause a denial of service condition on the system. | ||||||||||||
CVSS v3 Severity: | 6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) 5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
5.2 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 5.6 Medium (CCN CVSS v2 Vector: AV:N/AC:H/Au:S/C:N/I:C/A:P)
| ||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2022-3437 Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: secalert@redhat.com Type: Third Party Advisory secalert@redhat.com Source: secalert@redhat.com Type: Issue Tracking, Third Party Advisory secalert@redhat.com Source: XF Type: UNKNOWN samba-cve20223437-bo(243456) Source: secalert@redhat.com Type: UNKNOWN secalert@redhat.com Source: CCN Type: Mend Vulnerability Database CVE-2022-3437 Source: CCN Type: Samba Web site CVE-2022-3437.html Source: secalert@redhat.com Type: Vendor Advisory secalert@redhat.com | ||||||||||||
Vulnerable Configuration: | Configuration CCN 1:![]() | ||||||||||||
Oval Definitions | |||||||||||||
| |||||||||||||
BACK |