2 lines
5.7 KiB
JSON
2 lines
5.7 KiB
JSON
{"affected":[{"affectedData":[{"product":"samba","vendor":"n/a","versions":[{"status":"affected","version":"Fixed in samba 4.15.11, samba 4.16.6, samba 4.17.2."}]}],"source":"secalert@redhat.com"},{"affectedData":[{"cpes":["cpe:2.3:a:samba:samba:4.15.11:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"samba","vendor":"samba","versions":[{"status":"unaffected","version":"4.15.11"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","matchCriteriaId":"5DEC17A1-7D7E-438F-A7BF-6FA34AD63EC7","versionEndExcluding":"4.15.11","versionStartIncluding":"4.0.0","vulnerable":true},{"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","matchCriteriaId":"6601140E-E676-40C8-9700-9B7F9ACEC63C","versionEndExcluding":"4.16.6","versionStartIncluding":"4.16.0","vulnerable":true},{"criteria":"cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","matchCriteriaId":"9CD07976-E402-4282-B52A-AC9A6FD27FB5","versionEndExcluding":"4.17.2","versionStartIncluding":"4.17.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","matchCriteriaId":"5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","matchCriteriaId":"E30D0E6F-4AE8-4284-8716-991DFA48CC5D","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack."},{"lang":"es","value":"Se encontró una vulnerabilidad de desbordamiento de búfer en Samba dentro de las rutinas GSSAPI unwrap_des() y unwrap_des3() de Heimdal. Las rutinas de descifrado DES y Triple-DES de la biblioteca GSSAPI de Heimdal permiten un desbordamiento del búfer de escritura de longitud limitada en la memoria asignada a malloc() cuando se presenta un paquete maliciosamente pequeño. Este fallo permite a un usuario remoto enviar datos maliciosos especialmente manipulados a la aplicación, lo que puede provocar un ataque de denegación de servicio (DoS)."}],"id":"CVE-2022-3437","lastModified":"2026-06-17T04:59:31.587","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":2.8,"impactScore":1.4,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-3437","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-04-22T18:53:20.072020Z","version":"2.0.3"}}]},"published":"2023-01-12T15:15:10.083","references":[{"source":"secalert@redhat.com","url":"http://www.openwall.com/lists/oss-security/2023/02/08/1"},{"source":"secalert@redhat.com","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2022-3437"},{"source":"secalert@redhat.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137774"},{"source":"secalert@redhat.com","url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html"},{"source":"secalert@redhat.com","url":"https://security.gentoo.org/glsa/202309-06"},{"source":"secalert@redhat.com","url":"https://security.gentoo.org/glsa/202310-06"},{"source":"secalert@redhat.com","url":"https://security.netapp.com/advisory/ntap-20230216-0008/"},{"source":"secalert@redhat.com","tags":["Vendor Advisory"],"url":"https://www.samba.org/samba/security/CVE-2022-3437.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.openwall.com/lists/oss-security/2023/02/08/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/security/cve/CVE-2022-3437"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137774"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.gentoo.org/glsa/202309-06"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.gentoo.org/glsa/202310-06"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://security.netapp.com/advisory/ntap-20230216-0008/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.samba.org/samba/security/CVE-2022-3437.html"}],"sourceIdentifier":"secalert@redhat.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-122"}],"source":"secalert@redhat.com","type":"Secondary"}]}
|