Heap-based buffer overflow in Samba - CVE-2022-3437

Vulnerability identifier: #VU68701

CSH Severity: Low

CVSS v4: 2.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-3437

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. A remote user can send specially crafted data to the application, trigger a heap-based buffer overflow and perform a denial of service (DoS) attack.

Samba
Debian Linux
Amazon Linux AMI
Gentoo Linux
QuTScloud
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
Fedora
SUSE Enterprise Storage
FreeBSD
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise High Availability
Ubuntu
Slackware Linux
macOS
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Python2
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
openEuler
QVP (QVR Pro appliances)
QuTS hero
QVR
heimdal
IBM Spectrum Scale
libgssapi3-heimdal (Ubuntu package)
libhdb9-heimdal (Ubuntu package)
libasn1-8-heimdal (Ubuntu package)
libkrb5-26-heimdal (Ubuntu package)
libhx509-5-heimdal (Ubuntu package)
samba (Ubuntu package)
ctdb-tests
ctdb
samba-client
samba-winbind-krb5-locator
samba-dc-provision
samba-libs
samba-krb5-printing
python3-samba-test
samba-debugsource
samba-dc
samba
samba-vfs-glusterfs
python3-samba-dc
samba-pidl
libsmbclient-devel
samba-help
libwbclient
python3-samba
libwbclient-devel
samba-common-tools
samba-common
samba-winbind-modules
libsmbclient
samba-devel
samba-dc-bind-dlz
samba-winbind
samba-debuginfo
samba-winbind-clients
samba-test
samba (Debian package)
samba-winbind-libs
samba-ldb-ldap
libsamba-policy0-python3
libsamba-policy0-python3-debuginfo
samba-ad-dc
samba-ad-dc-debuginfo
samba-ad-dc-libs
samba-ad-dc-libs-debuginfo
samba-client-debuginfo
samba-dsdb-modules
samba-dsdb-modules-debuginfo
samba-gpupdate
samba-ldb-ldap-debuginfo
libsamba-policy-python3-devel
libsamba-policy-devel
samba-winbind-libs-debuginfo
samba-ceph
ctdb-pcp-pmda-debuginfo
ctdb-pcp-pmda
samba-ceph-debuginfo
ctdb-debuginfo
libsamba-policy0-python3-64bit
libsamba-policy0-python3-64bit-debuginfo
samba-client-libs
samba-client-libs-debuginfo
samba-client-64bit
samba-ad-dc-libs-32bit
samba-libs-32bit-debuginfo
samba-libs-32bit
samba-devel-32bit
samba-client-libs-32bit-debuginfo
samba-client-libs-32bit
samba-client-32bit-debuginfo
samba-client-32bit
samba-ad-dc-libs-32bit-debuginfo
samba-libs-python3-32bit
libsamba-policy0-python3-32bit-debuginfo
libsamba-policy0-python3-32bit
samba-doc
samba-libs-python3-64bit-debuginfo
samba-libs-python3-64bit
samba-libs-64bit-debuginfo
samba-libs-64bit
samba-libs-python3-32bit-debuginfo
samba-winbind-libs-32bit
samba-winbind-libs-32bit-debuginfo
samba-winbind-debuginfo
samba-tool
samba-test-debuginfo
samba-python3-debuginfo
samba-python3
samba-libs-python3-debuginfo
samba-libs-python3
samba-client-64bit-debuginfo
samba-libs-debuginfo
samba-winbind-libs-debuginfo-32bit
samba-libs-python3-debuginfo-32bit
samba-libs-debuginfo-32bit
samba-client-libs-debuginfo-32bit
libsamba-policy0-python3-debuginfo-32bit
samba-client-debuginfo-32bit
net-fs/samba
heimdal (Debian package)
heimdal
cflinuxfs3
Platform Automation Toolkit
QNAP QTS

Install updates from vendor's website.

Samba - addressed in versions 4.15.11, 4.16.6, 4.17.2
heimdal - update to 7.7.1
IBM Spectrum Scale - addressed in versions 5.1.6.1, 5.1.7.0
macOS - addressed in versions 13.0 22A380, 15.8 24H23, 26.7 25G229, 27.0 26A428
libgssapi3-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
libhdb9-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
libasn1-8-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
libkrb5-26-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
libhx509-5-heimdal (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 7.5.0+dfsg-1ubuntu0.3, 7.7.0+dfsg-1ubuntu1.3
QuTS hero - update to h5.0.1.2348 build 20230324
cflinuxfs3 - update to 0.349.0
samba (Ubuntu package) - addressed in versions 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13, 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14, 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2, 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3, 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1, 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2, 2:4.13.17~dfsg-0ubuntu1.20.04.4, 2:4.13.17~dfsg-0ubuntu1.20.04.5, 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1, 2:4.16.8+dfsg-0ubuntu1
Platform Automation Toolkit - addressed in versions 4.4.31, 5.0.24, 5.1.0
ctdb-tests - update to 4.11.12-20
ctdb - update to 4.11.12-20
samba-client - update to 4.11.12-20
samba-winbind-krb5-locator - update to 4.11.12-20
samba-dc-provision - update to 4.11.12-20
samba-libs - update to 4.11.12-20
samba-krb5-printing - update to 4.11.12-20
python3-samba-test - update to 4.11.12-20
samba-debugsource - update to 4.11.12-20
samba-dc - update to 4.11.12-20
samba - update to 4.11.12-20
samba-vfs-glusterfs - update to 4.11.12-20
python3-samba-dc - update to 4.11.12-20
samba-pidl - update to 4.11.12-20
libsmbclient-devel - update to 4.11.12-20
samba-help - update to 4.11.12-20
libwbclient - update to 4.11.12-20
python3-samba - update to 4.11.12-20
libwbclient-devel - update to 4.11.12-20
samba-common-tools - update to 4.11.12-20
samba-common - update to 4.11.12-20
samba-winbind-modules - update to 4.11.12-20
libsmbclient - update to 4.11.12-20
samba-devel - update to 4.11.12-20
samba-dc-bind-dlz - update to 4.11.12-20
samba-winbind - update to 4.11.12-20
samba-debuginfo - update to 4.11.12-20
samba-winbind-clients - update to 4.11.12-20
samba-test - update to 4.11.12-20
samba (Debian package) - update to 2:4.13.13+dfsg-1~deb11u6
samba - update to 4.15.11
samba - addressed in versions 4.15.11-0.fc35, 4.15.12-0.fc35, 4.16.6-0.fc36, 4.17.2-2.fc37
samba-winbind-libs - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ldb-ldap - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3 - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-libs - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-libs-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-devel - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-dsdb-modules - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-dsdb-modules-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-gpupdate - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ldb-ldap-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy-python3-devel - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy-devel - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-libs-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ceph - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
ctdb-pcp-pmda-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
ctdb-pcp-pmda - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ceph-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
ctdb-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
ctdb - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-64bit - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-debugsource - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-64bit-debuginfo - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-client-libs - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-libs-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-64bit - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-libs-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-devel-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-libs-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-libs-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-ad-dc-libs-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-python3-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
libsamba-policy0-python3-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-doc - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-python3-64bit-debuginfo - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-libs-python3-64bit - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-libs-64bit-debuginfo - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-libs-64bit - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-libs-python3-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-libs-32bit - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-libs-32bit-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-tool - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-test-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-test - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-python3-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-python3 - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-python3-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs-python3 - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-client-64bit-debuginfo - update to 4.15.12+git.535.7750e5c95ef-150300.3.43.1
samba-libs-debuginfo - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-libs - addressed in versions 4.15.12+git.535.7750e5c95ef-150300.3.43.1, 4.15.13+git.482.1ac2c665c7-3.74.1, 4.15.13+git.591.ab36624310c-150400.3.19.1
samba-winbind-libs-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba-libs-python3-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba-libs-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba-client-libs-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
libsamba-policy0-python3-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba-client-debuginfo-32bit - update to 4.15.13+git.482.1ac2c665c7-3.74.1
samba - update to 4.17.5-0
net-fs/samba - update to 4.18.4
QNAP QTS - update to 5.0.1.2346 20230322
heimdal (Debian package) - addressed in versions 7.7.0+dfsg-2+deb11u2, 7.7.0+dfsg-2+deb11u3
heimdal - addressed in versions 7.7.1-1.el7, 7.7.1-1.el8, 7.7.1-1.fc35, 7.7.1-1.fc36, 7.7.1-1.fc37, 7.7.1-3.fc35, 7.7.1-3.fc36, 7.7.1-3.fc37

• https://www.samba.org/samba/security/CVE-2022-3437.html

• Multiple vulnerabilities in Samba
• Slackware Linux update for samba
• Multiple vulnerabilities in Apple macOS Ventura
• Multiple vulnerabilities in Heimdal
• FreeBSD update for heimdal
• Debian update for heimdal
• SUSE update for samba
• SUSE update for samba
• Ubuntu update for heimdal
• Cloud Foundry Foundation cflinuxfs3 update for Heimdal
• Ubuntu update for samba
• SUSE update for samba
• Ubuntu update for samba
• Debian update for heimdal
• IBM Spectrum Scale update for Samba
• Ubuntu update for samba
• Multiple vulnerabilities in QNAP devices running Samba
• Multiple vulnerabilities in VMware Tanzu Platform Automation Toolkit
• Gentoo update for Samba
• openEuler update for samba
• Debian update for samba
• Amazon Linux AMI update for samba
• Fedora 37 update for samba
• Fedora 36 update for samba
• Fedora 35 update for samba
• Fedora 35 update for samba
• Fedora 37 update for heimdal
• Fedora 36 update for heimdal
• Fedora 35 update for heimdal
• Fedora EPEL 8 update for heimdal
• Fedora EPEL 7 update for heimdal
• Fedora 37 update for heimdal
• Fedora 35 update for heimdal
• Fedora 36 update for heimdal
• Ubuntu update for samba
• Ubuntu update for samba
• Multiple vulnerabilities in macOS Tahoe
• Multiple vulnerabilities in macOS Sequoia
• Multiple vulnerabilities in macOS Golden Gate