Heap-based buffer overflow in Samba - CVE-2022-3437

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU68701

Heap-based buffer overflow in Samba - CVE-2022-3437

Published: October 25, 2022


Vulnerability identifier: #VU68701
CSH Severity: Low
CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-3437
CWE-ID: CWE-122
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. A remote user can send specially crafted data to the application, trigger a heap-based buffer overflow and perform a denial of service (DoS) attack.



Affected software

Samba
Debian Linux
Amazon Linux AMI
QuTScloud
Gentoo Linux
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
Fedora
SUSE Enterprise Storage
FreeBSD
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
Ubuntu
Slackware Linux
SUSE Linux Enterprise Module for Python2
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
openEuler
macOS
QVR
QVP (QVR Pro appliances)
QuTS hero
heimdal
IBM Spectrum Scale
libhx509-5-heimdal (Ubuntu package)
libkrb5-26-heimdal (Ubuntu package)
libasn1-8-heimdal (Ubuntu package)
libhdb9-heimdal (Ubuntu package)
libgssapi3-heimdal (Ubuntu package)
samba (Ubuntu package)
samba-test
samba-pidl
ctdb-tests
samba-client
samba-winbind-krb5-locator
samba-dc-provision
samba-libs
samba-krb5-printing
python3-samba-test
samba-debugsource
samba-dc
samba
samba-vfs-glusterfs
libwbclient-devel
ctdb
python3-samba-dc
libsmbclient-devel
samba-help
libwbclient
python3-samba
samba-common-tools
samba-common
samba-winbind-modules
libsmbclient
samba-devel
samba-dc-bind-dlz
samba-winbind
samba-debuginfo
samba-winbind-clients
samba (Debian package)
samba-client-libs-debuginfo
samba-client-libs
ctdb-pcp-pmda
samba-winbind-libs-32bit-debuginfo
samba-winbind-libs-32bit
samba-libs-python3-32bit-debuginfo
samba-libs-python3-32bit
samba-libs-32bit-debuginfo
samba-libs-32bit
libsamba-policy0-python3-64bit
samba-python3
samba-python3-debuginfo
samba-test-debuginfo
samba-tool
samba-winbind-debuginfo
samba-winbind-libs
samba-winbind-libs-debuginfo
samba-ceph
samba-ceph-debuginfo
samba-libs-python3-debuginfo
libsamba-policy0-python3-64bit-debuginfo
samba-client-64bit
samba-client-64bit-debuginfo
samba-libs-64bit
samba-libs-64bit-debuginfo
samba-libs-python3-64bit
samba-libs-python3-64bit-debuginfo
samba-doc
libsamba-policy0-python3-32bit
libsamba-policy0-python3-32bit-debuginfo
ctdb-debuginfo
ctdb-pcp-pmda-debuginfo
libsamba-policy-devel
libsamba-policy-python3-devel
libsamba-policy0-python3
libsamba-policy0-python3-debuginfo
samba-ad-dc
samba-ad-dc-debuginfo
samba-ad-dc-libs
samba-ad-dc-libs-debuginfo
samba-client-libs-32bit-debuginfo
samba-client-debuginfo
samba-dsdb-modules
samba-dsdb-modules-debuginfo
samba-gpupdate
samba-ldb-ldap
samba-ldb-ldap-debuginfo
samba-libs-debuginfo
samba-libs-python3
samba-devel-32bit
samba-client-libs-32bit
samba-client-32bit-debuginfo
samba-client-32bit
samba-ad-dc-libs-32bit-debuginfo
samba-ad-dc-libs-32bit
libsamba-policy0-python3-debuginfo-32bit
samba-client-debuginfo-32bit
samba-client-libs-debuginfo-32bit
samba-libs-debuginfo-32bit
samba-libs-python3-debuginfo-32bit
samba-winbind-libs-debuginfo-32bit
net-fs/samba
heimdal (Debian package)
heimdal
cflinuxfs3
Platform Automation Toolkit
QNAP QTS

How to mitigate CVE-2022-3437

Install updates from vendor's website.

Samba - addressed in versions 4.15.11, 4.16.6, 4.17.2
heimdal - update to 7.7.1
IBM Spectrum Scale - addressed in versions 5.1.6.1, 5.1.7.0
libhx509-5-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
libkrb5-26-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
libasn1-8-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
libhdb9-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
libgssapi3-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
QuTS hero - update to h5.0.1.2348 build 20230324
cflinuxfs3 - update to 0.349.0
samba (Ubuntu package) - addressed in versions 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13, 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14, 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2, 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3, 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1, 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2, 2:4.13.17~dfsg-0ubuntu1.20.04.4, 2:4.13.17~dfsg-0ubuntu1.20.04.5, 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1, 2:4.16.8+dfsg-0ubuntu1
Platform Automation Toolkit - addressed in versions 4.4.31, 5.0.24, 5.1.0
samba-test - update to 4.11.12-20
samba-pidl - update to 4.11.12-20
ctdb-tests - update to 4.11.12-20
samba-client - update to 4.11.12-20
samba-winbind-krb5-locator - update to 4.11.12-20
samba-dc-provision - update to 4.11.12-20
samba-libs - update to 4.11.12-20
samba-krb5-printing - update to 4.11.12-20
python3-samba-test - update to 4.11.12-20
samba-debugsource - update to 4.11.12-20
samba-dc - update to 4.11.12-20
samba - update to 4.11.12-20
samba-vfs-glusterfs - update to 4.11.12-20
libwbclient-devel - update to 4.11.12-20
ctdb - update to 4.11.12-20
python3-samba-dc - update to 4.11.12-20
libsmbclient-devel - update to 4.11.12-20
samba-help - update to 4.11.12-20
libwbclient - update to 4.11.12-20
python3-samba - update to 4.11.12-20
samba-common-tools - update to 4.11.12-20
samba-common - update to 4.11.12-20
samba-winbind-modules - update to 4.11.12-20
libsmbclient - update to 4.11.12-20
samba-devel - update to 4.11.12-20
samba-dc-bind-dlz - update to 4.11.12-20
samba-winbind - update to 4.11.12-20
samba-debuginfo - update to 4.11.12-20
samba-winbind-clients - update to 4.11.12-20
samba (Debian package) - update to 2:4.13.13+dfsg-1~deb11u6
samba - update to 4.15.11
samba - addressed in versions 4.15.11-0.fc35, 4.15.12-0.fc35, 4.16.6-0.fc36, 4.17.2-2.fc37
samba-client-libs-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-libs - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-debugsource - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
ctdb-pcp-pmda - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
ctdb - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-libs-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-libs-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-python3-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-python3-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-64bit - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-python3 - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-python3-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-test - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-test-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-tool - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-libs - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-libs-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ceph - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ceph-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-python3-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-64bit-debuginfo - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-client-64bit - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-client-64bit-debuginfo - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-libs-64bit - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-libs-64bit-debuginfo - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-libs-python3-64bit - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-libs-python3-64bit-debuginfo - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-doc - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
ctdb-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
ctdb-pcp-pmda-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy-devel - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy-python3-devel - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3 - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-libs - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-libs-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-libs-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-devel - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-dsdb-modules - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-dsdb-modules-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-gpupdate - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ldb-ldap - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ldb-ldap-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-python3 - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-devel-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-libs-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-libs-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-libs-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba-client-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba-client-libs-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba-libs-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba-libs-python3-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba-winbind-libs-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba - update to 4.17.5-0
net-fs/samba - update to 4.18.4
QNAP QTS - update to 5.0.1.2346 20230322
heimdal (Debian package) - addressed in versions 7.7.0+dfsg-2+deb11u2, 7.7.0+dfsg-2+deb11u3
heimdal - addressed in versions 7.7.1-1.el7, 7.7.1-1.el8, 7.7.1-1.fc35, 7.7.1-1.fc36, 7.7.1-1.fc37, 7.7.1-3.fc35, 7.7.1-3.fc36, 7.7.1-3.fc37
macOS - update to 13.0 22A380

External References

Related Security Bulletins