CVE-2022-32742: Infoleak
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).
Other sources
As per samba upstream advisory:
All versions of Samba with SMB1 enabled are vulnerable to a server memory information leak bug over SMB1 if a client can write data to a share. Some SMB1 write requests were not correctly range checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client supplied data. The client cannot control the area of the server memory that is written to the file (or printer).
Please note that only versions of Samba prior to 4.11.0 are vulnerable to this bug by default. Samba versions 4.11.0 and above disable SMB1 by default, and will only be vulnerable if the administrator has deliberately enabled SMB1 in the smb.conf file.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.17.12+dfsg-0+deb12u4Fixed in 2:4.22.11+dfsg-0+deb13u1Fixed in 2:4.22.10+dfsg-0+deb13u2Fixed in 2:4.25.1+dfsg-1 - Upgrade
Upgrade
alpine/sambato a version that resolves this vulnerability.Fixed in 4.14.14-r0 - Upgrade
Upgrade
alpine/sambato a version that resolves this vulnerability.Fixed in 4.15.12-r0 - Upgrade
Upgrade
alpine/sambato a version that resolves this vulnerability.Fixed in 4.15.9-r0 - Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.16.4+dfsg-1 - Upgrade
Upgrade
redhat/sambato a version that resolves this vulnerability.Fixed in 4.16.4 - Upgrade
Upgrade
redhat/sambato a version that resolves this vulnerability.Fixed in 4.15.9 - Upgrade
Upgrade
redhat/sambato a version that resolves this vulnerability.Fixed in 4.14.14 - Configuration
Disable SMB1 in the smb.conf file.
Samba SMB1 = disabled
Event History
Frequently Asked Questions
What is CVE-2022-32742?
CVE-2022-32742 is a vulnerability found in Samba that allows server memory contents to be written into a file or printer instead of client-supplied data.
What is the severity of CVE-2022-32742?
The severity of CVE-2022-32742 is medium with a CVSS score of 4.3.
Which versions of Samba are affected by CVE-2022-32742?
Versions up to and including 4.14.14, 4.15.0 to 4.15.9, and 4.16.0 to 4.16.4 of Samba are affected by CVE-2022-32742.
How can I fix CVE-2022-32742?
To fix CVE-2022-32742, it is recommended to update Samba to a patched version provided by the vendor or apply the necessary security patches.
Where can I find more information about CVE-2022-32742?
You can find more information about CVE-2022-32742 at the following references: [Gentoo Security Advisory](https://security.gentoo.org/glsa/202309-06) and [Samba Security](https://www.samba.org/samba/security/CVE-2022-32742.html).