CVEvulnerability

CVE-2022-3437

6.5 MEDIUM Published 2023-01-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-122

Description

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.

Affected configurations

• samba samba (>= 4.0.0 < 4.15.11) • samba samba (>= 4.16.0 < 4.16.6) • samba samba (>= 4.17.0 < 4.17.2) • fedoraproject fedora 36 • fedoraproject fedora 37

Related

Weakness · CWE (1)

  • CWE-122 Heap-based Buffer Overflow weakness

References