Lucene search
Veracode Vulnerability DatabaseVERACODE:37798HistoryNov 03, 2022 - 6:48 a.m.
Privilege Escalation
2022-11-0306:48:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
samba
privilege escalation
vulnerability
validated dns host name
unprivileged users
software
EPSS
0.002
Percentile
51.9%
samba is vulnerable to privilege escalation. The vulnerability exists because it does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which allows an unprivileged users to write it.
References
bugzilla.samba.org/show_bug.cgi?id=14833
docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/5c578b15-d619-408d-ba17-380714b89fd1
lists.fedoraproject.org/archives/list/[email protected]/message/ZTTOLTHUHOV4SHCHCB5TAA4FQVJAWN4P/
secdb.alpinelinux.org/v3.14/main.yaml
security.gentoo.org/glsa/202309-06
Related
osv
osv
CVE-2022-32743
2022-09-01 21:15:10
nessus
nessus
EulerOS Virtualization 2.10.0 : samba (EulerOS-SA-2023-1175)
2023-01-11 00:00:00
EulerOS 2.0 SP10 : samba (EulerOS-SA-2022-2830)
2022-12-21 00:00:00
EulerOS Virtualization 2.10.1 : samba (EulerOS-SA-2023-1154)
2023-01-11 00:00:00
alpinelinux
alpinelinux
CVE-2022-32743
2022-09-01 21:15:10
prion
prion
Design/Logic Flaw
2022-09-01 21:15:00
redhatcve
redhatcve
CVE-2022-32743
2022-08-24 15:11:36
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1154)
2023-01-12 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2022-2830)
2022-12-22 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1175)
2023-01-12 00:00:00
cve
cve
CVE-2022-32743
2022-09-01 21:15:10
ubuntucve
ubuntucve
CVE-2022-32743
2022-09-01 00:00:00
debiancve
debiancve
CVE-2022-32743
2022-09-01 21:15:10
cvelist
cvelist
CVE-2022-32743
2022-09-01 00:00:00
nvd
nvd
CVE-2022-32743
2022-09-01 21:15:10
cbl_mariner
cbl_mariner
CVE-2022-32743 affecting package samba 4.12.5-6
2024-09-19 09:11:58
fedora
fedora
[SECURITY] Fedora 37 Update: freeipa-4.10.0-6.fc37
2022-09-16 00:18:49
[SECURITY] Fedora 37 Update: samba-4.17.0-1.fc37
2022-09-16 00:18:49
suse
suse
Security update for samba (important)
2022-09-12 00:00:00
samba
samba
Samba AD DC "dnsHostname" attribute can be
2023-03-29 00:00:00
gentoo
gentoo
Samba: Multiple Vulnerabilities
2023-09-17 00:00:00