CVE-2022-0336
First published: Wed Jan 26 2022(Updated: )
The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Samba Samba | >=4.0.0<4.13.17 | |
| Samba Samba | >=4.14.0<4.14.12 | |
| Samba Samba | >=4.15.0<4.15.4 | |
| Fedoraproject Fedora | =34 | |
| Fedoraproject Fedora | =35 | |
| redhat/samba | <4.13.17 | 4.13.17 |
| redhat/samba | <4.14.12 | 4.14.12 |
| redhat/samba | <4.15.4 | 4.15.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/security/cve/CVE-2022-0336
- https://bugzilla.redhat.com/show_bug.cgi?id=2046134
- https://bugzilla.samba.org/show_bug.cgi?id=14950
- https://github.com/samba-team/samba/commit/1a5dc817c0c9379bbaab14c676681b42b0039a3c
- https://github.com/samba-team/samba/commit/c58ede44f382bd0125f761f0479c8d48156be400
- https://security.gentoo.org/glsa/202309-06
- https://www.samba.org/samba/security/CVE-2022-0336.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2048568
- https://access.redhat.com/security/cve/cve-2022-0336
Frequently Asked Questions
What is CVE-2022-0336?
CVE-2022-0336 is a vulnerability in Samba AD DC that allows bypassing checks when adding service principals names (SPNs) to an account, potentially leading to unauthorized access.
What is the severity of CVE-2022-0336?
CVE-2022-0336 has a severity rating of 8.8 which is considered high.
How does CVE-2022-0336 affect Samba AD DC?
CVE-2022-0336 affects Samba AD DC by allowing the bypassing of checks when adding service principals names (SPNs) to an account.
How can I fix CVE-2022-0336?
To fix CVE-2022-0336, you should upgrade Samba to version 4.13.17, 4.14.12, or 4.15.4 depending on your installed version.
Where can I find more information about CVE-2022-0336?
You can find more information about CVE-2022-0336 on the Red Hat Security Advisory, Bugzilla reports, and the official CVE page.
- collector/nvd-api
- collector/nvd-index
- collector/redhat-bugzilla
- alias/CVE-2022-0336
- vendor/samba
- canonical/samba samba
- version/samba samba/4.0.0
- version/samba samba/4.14.0
- version/samba samba/4.15.0
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/34
- version/fedoraproject fedora/35
- package-manager/redhat