Lucene search
Veracode Vulnerability DatabaseVERACODE:37819HistoryNov 07, 2022 - 7:28 a.m.
Buffer Overflow
2022-11-0707:28:09
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
samba
buffer overflow
gssapi
heimdal
malloc
vulnerability
EPSS
0.022
Percentile
89.6%
samba is vulnerable to buffer overflow. The vulnerability exists within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal because GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet causing an application crash.
References
www.openwall.com/lists/oss-security/2023/02/08/1
access.redhat.com/security/cve/CVE-2022-3437
bugzilla.redhat.com/show_bug.cgi?id=2137774
bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-3437
secdb.alpinelinux.org/edge/main.yaml
security.gentoo.org/glsa/202309-06
security.gentoo.org/glsa/202310-06
security.netapp.com/advisory/ntap-20230216-0008/
www.rapid7.com/db/vulnerabilities/samba-cve-2022-3437
www.samba.org/samba/security/CVE-2022-3437.html
Related
freebsd
freebsd
samba -- buffer overflow in Heimdal unwrap_des3()
2022-08-02 00:00:00
FreeBSD -- Multiple vulnerabilities in Heimdal
2022-11-15 00:00:00
nessus
nessus
Slackware Linux 15.0 / current samba Vulnerability (SSA:2022-298-02)
2022-10-25 00:00:00
Samba 4.0.x < 4.15.11 / 4.16.x < 4.16.6 / 4.17.x < 4.17.2 Buffer Overflow
2022-11-01 00:00:00
EulerOS 2.0 SP11 : samba (EulerOS-SA-2023-1046)
2023-01-05 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1046)
2023-01-09 00:00:00
Slackware: Security Advisory (SSA:2022-298-02)
2022-10-26 00:00:00
Samba 4.0 Buffer Overflow Vulnerability (CVE-2022-3437)
2022-10-26 00:00:00
debiancve
debiancve
CVE-2022-3437
2023-01-12 15:15:10
CVE-2022-45142
2023-03-06 23:15:11
cbl_mariner
cbl_mariner
CVE-2022-3437 affecting package samba 4.12.5-6
2024-09-30 03:52:42
cvelist
cvelist
CVE-2022-3437
2023-01-12 00:00:00
CVE-2022-45142
2023-03-06 00:00:00
nvd
nvd
CVE-2022-3437
2023-01-12 15:15:10
CVE-2022-45142
2023-03-06 23:15:11
ibm
ibm
samba
samba
Buffer overflow in Heimdal unwrap_des3()
2022-10-25 00:00:00
f5
f5
K000133223 : Samba vulnerability CVE-2022-3437
2023-03-28 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.16.6-alt1
2022-10-27 00:00:00
slackware
slackware
[slackware-security] samba
2022-10-25 18:53:43
osv
osv
CVE-2022-3437
2023-01-12 15:15:10
ctdb-4.17.2+git.273.a55a83528b9-1.1 on GA media
2024-06-15 00:00:00
CVE-2022-45142
2023-03-06 23:15:11
prion
prion
Heap overflow
2023-01-12 15:15:00
Design/Logic Flaw
2023-03-06 23:15:00
cve
cve
CVE-2022-3437
2023-01-12 15:15:10
CVE-2022-45142
2023-03-06 23:15:11
vulnrichment
vulnrichment
CVE-2022-3437
2023-01-12 00:00:00
redhatcve
redhatcve
CVE-2022-3437
2022-10-26 14:23:02
CVE-2022-45142
2023-02-09 13:26:48
alpinelinux
alpinelinux
CVE-2022-3437
2023-01-12 15:15:10
CVE-2022-45142
2023-03-06 23:15:11
debian
debian
[SECURITY] [DLA 3311-1] heimdal security update
2023-02-08 11:57:40
[SECURITY] [DSA 5344-1] heimdal security update
2023-02-08 12:46:12
[SECURITY] [DSA 5287-1] heimdal security update
2022-11-22 19:58:01
fedora
fedora
[SECURITY] Fedora 36 Update: samba-4.16.6-0.fc36
2022-10-27 12:20:52
[SECURITY] Fedora 37 Update: samba-4.17.2-2.fc37
2022-11-10 22:53:16
[SECURITY] Fedora 35 Update: samba-4.15.12-0.fc35
2022-12-02 06:21:54
mageia
mageia
Updated heimdal packages fix security vulnerability
2023-03-19 01:16:28
Updated samba packages fix security vulnerability
2023-01-24 10:58:24
Updated heimdal packages fix security vulnerability
2022-12-17 21:48:08
cisa
cisa
Samba Releases Security Updates
2022-10-26 00:00:00
redos
redos
ROS-20230324-01
2023-03-24 00:00:00
ubuntucve
ubuntucve
CVE-2022-3437
2022-10-27 00:00:00
CVE-2022-45142
2023-02-08 00:00:00
cloudfoundry
cloudfoundry
USN-5800-1: Heimdal vulnerabilities | Cloud Foundry
2023-02-01 00:00:00
ubuntu
ubuntu
Heimdal vulnerabilities
2023-01-12 00:00:00
Samba vulnerabilities
2023-03-08 00:00:00
Samba vulnerabilities
2023-01-24 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-22:14.heimdal
2022-11-15 00:00:00
gentoo
gentoo
Heimdal: Multiple Vulnerabilities
2023-10-08 00:00:00
Samba: Multiple Vulnerabilities
2023-09-17 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2451
2024-07-15 09:04:20
apple
apple
About the security content of macOS Ventura 13
2022-10-24 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00
avleonov
avleonov