Lucene search
Veracode Vulnerability DatabaseVERACODE:38143HistoryNov 21, 2022 - 3:06 p.m.
Denial Of Service (DoS)
2022-11-2115:06:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
samba
vulnerability
denial of service
integer overflows
parsing
pac
32-bit system
attacker
forged pac
heap corruption
software
EPSS
0.007
Percentile
80.5%
samba is vulnerable to denial of service (DoS) attacks. The library fails to guard against integer overflows when parsing a PAC on a 32-bit system, which allows an attacker with a forged PAC to corrupt the heap.
References
bugzilla.samba.org/show_bug.cgi?id=15203
github.com/heimdal/heimdal/security/advisories/GHSA-64mq-fvfj-5x3c
github.com/krb5/krb5/commit/ea92d2f0fcceb54a70910fa32e9a0d7a5afc3583
security-tracker.debian.org/tracker/CVE-2022-42898
security.gentoo.org/glsa/202309-06
security.gentoo.org/glsa/202310-06
security.netapp.com/advisory/ntap-20230216-0008/
security.netapp.com/advisory/ntap-20230223-0001/
web.mit.edu/kerberos/advisories/
web.mit.edu/kerberos/krb5-1.19/
web.mit.edu/kerberos/krb5-1.20/README-1.20.1.txt
www.samba.org/samba/security/CVE-2022-42898.html
Related
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1136)
2023-01-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0198-1)
2023-01-30 00:00:00
Huawei EulerOS: Security Advisory for krb5 (EulerOS-SA-2023-1321)
2023-02-09 00:00:00
nessus
nessus
SUSE SLES12 Security Update : krb5 (SUSE-SU-2022:4335-1)
2022-12-07 00:00:00
RHEL 8 : krb5 (RHSA-2022:8639)
2022-11-28 00:00:00
EulerOS 2.0 SP5 : krb5 (EulerOS-SA-2023-2153)
2023-06-09 00:00:00
debiancve
debiancve
CVE-2022-42898
2022-12-25 06:15:09
fedora
fedora
[SECURITY] Fedora 37 Update: samba-4.17.3-0.fc37
2022-11-18 01:18:28
[SECURITY] Fedora 37 Update: krb5-1.19.2-13.fc37
2022-11-22 01:37:30
[SECURITY] Fedora 36 Update: krb5-1.19.2-12.fc36
2022-11-22 01:20:35
amazon
amazon
Important: krb5
2023-01-18 20:56:00
Important: krb5
2023-01-31 20:44:00
Important: krb5
2023-01-18 00:17:00
cisa
cisa
Samba Releases Security Updates
2022-11-16 00:00:00
redhat
redhat
(RHSA-2022:8637) Important: krb5 security update
2022-11-28 09:18:18
(RHSA-2022:9029) Important: Red Hat Virtualization Host security update [ovirt-4.5.3-3]
2022-12-14 14:12:25
(RHSA-2022:8638) Important: krb5 security update
2022-11-28 09:21:44
cbl_mariner
cbl_mariner
CVE-2022-42898 affecting package samba 4.12.5-6
2024-09-27 09:12:43
CVE-2022-42898 affecting package heimdal 7.7.0-5
2023-01-29 21:01:57
CVE-2022-42898 affecting package krb5 1.18.4-2
2023-01-29 21:01:58
osv
osv
ctdb-4.17.3+git.279.ff9bb8a298-1.1 on GA media
2024-06-15 00:00:00
krb5 - security update
2022-11-29 00:00:00
Important: krb5 security update
2022-11-28 09:18:18
altlinux
altlinux
Security fix for the ALT Linux 9 package krb5 version 1.17.2-alt4
2022-11-24 00:00:00
Security fix for the ALT Linux 10 package samba version 4.16.7-alt1
2022-11-22 00:00:00
f5
f5
SAMBA vulnerability CVE-2022-42898
2022-11-29 22:49:00
prion
prion
Integer overflow
2022-12-25 06:15:00
rocky
rocky
krb5 security update
2022-11-28 09:18:18
krb5 security update
2022-11-28 09:21:44
oraclelinux
oraclelinux
krb5 security update
2022-11-29 00:00:00
krb5 security update
2023-02-09 00:00:00
krb5 security update
2022-11-29 00:00:00
ibm
ibm
Security Bulletin: IBM Security Guardium is affected by a denial of service vulnerability in MIT keb5 (CVE-2022-42898)
2023-09-19 19:52:23
almalinux
almalinux
Important: krb5 security update
2022-11-28 00:00:00
Important: krb5 security update
2022-11-28 00:00:00
cve
cve
CVE-2022-42898
2022-12-25 06:15:09
centos
centos
krb5, libkadm5 security update
2022-11-30 23:03:16
alpinelinux
alpinelinux
CVE-2022-42898
2022-12-25 06:15:09
samba
samba
Samba buffer overflow vulnerabilities on 32-bit
2022-11-15 00:00:00
redhatcve
redhatcve
CVE-2022-42898
2022-11-15 19:56:22
slackware
slackware
[slackware-security] samba
2022-11-17 02:00:41
[slackware-security] krb5
2022-11-17 01:59:39
debian
debian
[SECURITY] [DSA 5286-1] krb5 security update
2022-11-19 13:31:00
[SECURITY] [DLA 3213-1] krb5 security update
2022-11-29 15:07:54
mageia
mageia
Updated krb5 packages fix security vulnerability
2022-12-17 21:48:08
nvd
nvd
CVE-2022-42898
2022-12-25 06:15:09
ubuntucve
ubuntucve
CVE-2022-42898
2022-12-25 00:00:00
cloudlinux
cloudlinux
krb5: Fix of CVE-2022-42898
2022-12-12 19:47:31
cvelist
cvelist
CVE-2022-42898
2022-12-25 00:00:00
freebsd
freebsd
krb5 -- Integer overflow vulnerabilities in PAC parsing
2022-11-05 00:00:00
ubuntu
ubuntu
Kerberos vulnerabilities
2023-01-25 00:00:00
cloudfoundry
cloudfoundry
USN-5828-1: Kerberos vulnerabilities | Cloud Foundry
2023-02-24 00:00:00