← CVE Intelligence

CVE-2022-2127

Samba: out-of-bounds read in winbind auth_crap PUBLISHED

Description (CNA)

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.6-1.el8 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.6-1.el8 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:4.15.5-15.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.17.5-5.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.18.6-100.el9 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.18.6-100.el9 before *
Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8unaffected 0:4.15.5-15.el8_6 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Storage 3unknown

CWE

CWE-125

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.