Lucene search
Ubuntu.comUB:CVE-2022-32743HistorySep 01, 2022 - 12:00 a.m.
CVE-2022-32743
2022-09-0100:00:00
ubuntu.com
ubuntu.com
37
samba
validated-dns-host-name
unprivileged users
write
cve-2022-32743
low-severity
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.002
Percentile
51.9%
Samba does not validate the Validated-DNS-Host-Name right for the
dNSHostName attribute which could permit unprivileged users to write it.
Bugs
- <https://bugzilla.samba.org/show_bug.cgi?id=14833>
- <https://access.redhat.com/security/cve/CVE-2022-32743>
Notes
| Author | Note |
|---|---|
| mdeslaur | per comments #11 and #12 in the upstream bug, this is a low-severity issue. Setting priority to low. Upstream Samba project did not publish updates for stable releases below 4.17.x |
Related
osv
osv
CVE-2022-32743
2022-09-01 21:15:10
nessus
nessus
EulerOS Virtualization 2.10.0 : samba (EulerOS-SA-2023-1175)
2023-01-11 00:00:00
EulerOS 2.0 SP10 : samba (EulerOS-SA-2022-2830)
2022-12-21 00:00:00
EulerOS Virtualization 2.10.1 : samba (EulerOS-SA-2023-1154)
2023-01-11 00:00:00
alpinelinux
alpinelinux
CVE-2022-32743
2022-09-01 21:15:10
veracode
veracode
Privilege Escalation
2022-11-03 06:48:50
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1154)
2023-01-12 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-2830)
2022-12-22 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1175)
2023-01-12 00:00:00
cve
cve
CVE-2022-32743
2022-09-01 21:15:10
prion
prion
Design/Logic Flaw
2022-09-01 21:15:00
redhatcve
redhatcve
CVE-2022-32743
2022-08-24 15:11:36
debiancve
debiancve
CVE-2022-32743
2022-09-01 21:15:10
cvelist
cvelist
CVE-2022-32743
2022-09-01 00:00:00
nvd
nvd
CVE-2022-32743
2022-09-01 21:15:10
cbl_mariner
cbl_mariner
CVE-2022-32743 affecting package samba 4.12.5-6
2024-09-19 09:11:58
fedora
fedora
[SECURITY] Fedora 37 Update: freeipa-4.10.0-6.fc37
2022-09-16 00:18:49
[SECURITY] Fedora 37 Update: samba-4.17.0-1.fc37
2022-09-16 00:18:49
suse
suse
Security update for samba (important)
2022-09-12 00:00:00
samba
samba
Samba AD DC "dnsHostname" attribute can be
2023-03-29 00:00:00
gentoo
gentoo
Samba: Multiple Vulnerabilities
2023-09-17 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.002
Percentile
51.9%
Related for UB:CVE-2022-32743