Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2022-2127

Samba: out-of-bounds read in winbind auth_crap

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.18.6-1.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.18.6-1.el8 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support

Default version status: affected

  • 0:4.15.5-15.el8_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support

Default version status: affected

  • 0:4.17.5-5.el8_8 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:4.18.6-100.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:4.18.6-100.el9 to < *unaffected

Red Hat Red Hat Virtualization 4 for Red Hat Enterprise Linux 8

Default version status: affected

  • 0:4.15.5-15.el8_6 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 6

Default version status: unknown

Red Hat Red Hat Enterprise Linux 7

Default version status: unknown

Red Hat Red Hat Storage 3

Default version status: unknown

References