CVE-2022-3437
Fixed in a distro release EPSS 4%CVSS 4.3
A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.
Products: Samba
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine:v3.14 | heimdal | 7.7.1-r0 |
| Alpine:v3.15 | heimdal | 7.7.1-r0 |
| Alpine:v3.15 | samba | 4.15.12-r0 |
| Alpine:v3.16 | heimdal | 7.7.1-r0 |
| Alpine:v3.16 | samba | 4.15.12-r0 |
| Alpine:v3.17 | heimdal | 7.7.1-r0 |
| Alpine:v3.17 | samba | 4.16.6-r0 |
| Alpine:v3.18 | heimdal | 7.7.1-r0 |
| Alpine:v3.18 | samba | 4.16.6-r0 |
| Alpine:v3.19 | heimdal | 7.7.1-r0 |
| Alpine:v3.19 | samba | 4.16.6-r0 |
| Alpine:v3.20 | heimdal | 7.7.1-r0 |
| Alpine:v3.20 | samba | 4.16.6-r0 |
| Alpine:v3.21 | heimdal | 7.7.1-r0 |
| Alpine:v3.21 | samba | 4.16.6-r0 |
| Alpine:v3.22 | heimdal | 7.7.1-r0 |
| Alpine:v3.22 | samba | 4.16.6-r0 |
| Alpine:v3.23 | heimdal | 7.7.1-r0 |
| Alpine:v3.23 | samba | 4.16.6-r0 |
| Alpine:v3.24 | heimdal | 7.7.1-r0 |
| Alpine:v3.24 | samba | 4.16.6-r0 |
| Debian:10 | heimdal | 7.5.0+dfsg-3+deb10u1 |
| Debian:10 | samba | 2:4.9.5+dfsg-5+deb10u5 |
| Debian:11 | heimdal | 7.7.0+dfsg-2+deb11u2 |
| Debian:11 | samba | 2:4.13.13+dfsg-1~deb11u6 |
| Debian:12 | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| Debian:12 | samba | 2:4.16.6+dfsg-1 |
| Debian:13 | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| Debian:13 | samba | 2:4.16.6+dfsg-1 |
| Debian:14 | heimdal | 7.8.git20221115.a6cf945+dfsg-1 |
| Debian:14 | samba | 2:4.16.6+dfsg-1 |
| SUSE:Enterprise Storage 7.1 | samba | 4.15.12+git.535.7750e5c95ef-150300.3.43.1 |
| SUSE:Linux Enterprise High Availability Extension 12 SP5 | samba | 4.15.13+git.482.1ac2c665c7-3.74.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP3 | samba | 4.15.12+git.535.7750e5c95ef-150300.3.43.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP4 | samba | 4.15.13+git.591.ab36624310c-150400.3.19.1 |
| SUSE:Linux Enterprise Micro 5.2 | samba | 4.15.12+git.535.7750e5c95ef-150300.3.43.1 |
| SUSE:Linux Enterprise Micro 5.3 | samba | 4.15.13+git.591.ab36624310c-150400.3.19.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP3 | samba | 4.15.12+git.535.7750e5c95ef-150300.3.43.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP4 | samba | 4.15.13+git.591.ab36624310c-150400.3.19.1 |
| SUSE:Linux Enterprise Module for Python 2 15 SP3 | samba | 4.15.12+git.535.7750e5c95ef-150300.3.43.1 |
| SUSE:Linux Enterprise Server 12 SP5 | samba | 4.15.13+git.482.1ac2c665c7-3.74.1 |
| SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | samba | 4.15.13+git.482.1ac2c665c7-3.74.1 |
| SUSE:Linux Enterprise Software Development Kit 12 SP5 | samba | 4.15.13+git.482.1ac2c665c7-3.74.1 |
| SUSE:Package Hub 15 SP3 | libheimdal | 7.8.0-bp153.2.4.1 |
| SUSE:Package Hub 15 SP4 | libheimdal | 7.8.0-bp154.2.4.1 |
| Ubuntu:18.04:LTS | heimdal | 7.5.0+dfsg-1ubuntu0.3 |
| Ubuntu:20.04:LTS | heimdal | 7.7.0+dfsg-1ubuntu1.3 |
| Ubuntu:20.04:LTS | samba | 2:4.13.17~dfsg-0ubuntu1.20.04.5 |
| Ubuntu:20.04:LTS | samba | 2:4.13.17~dfsg-0ubuntu1.20.04.4 |
| Ubuntu:20.04:LTS | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| Ubuntu:22.04:LTS | heimdal | no fix |
| Ubuntu:22.04:LTS | samba | 2:4.15.13+dfsg-0ubuntu1 |
| Ubuntu:Pro:14.04:LTS | heimdal | 1.6~git20131207+dfsg-1ubuntu1.2+esm3 |
| Ubuntu:Pro:14.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13 |
| Ubuntu:Pro:16.04:LTS | heimdal | 1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3 |
| Ubuntu:Pro:16.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2 |
| Ubuntu:Pro:18.04:LTS | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1 |
| openSUSE:Leap 15.3 | libheimdal | 7.8.0-bp153.2.4.1 |
| openSUSE:Leap 15.3 | samba | 4.15.12+git.535.7750e5c95ef-150300.3.43.1 |
| openSUSE:Leap 15.4 | libheimdal | 7.8.0-bp154.2.4.1 |
| openSUSE:Leap 15.4 | samba | 4.15.13+git.591.ab36624310c-150400.3.19.1 |
| openSUSE:Leap Micro 5.2 | samba | 4.15.12+git.535.7750e5c95ef-150300.3.43.1 |
| openSUSE:Leap Micro 5.3 | samba | 4.15.13+git.591.ab36624310c-150400.3.19.1 |
| openSUSE:Tumbleweed | samba | 4.17.2+git.273.a55a83528b9-1.1 |