CVE-2022-32743: High severity samba vulnerability
Published Sep 1, 2022
·Updated
Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it.
Affected Software
4 affected componentsFixes available
Samba Samba>=4.1.0
Fedoraproject Fedora=37
Samba Samba>=4.1.0<4.17.0
Microsoft cbl2 samba
Remediation
Event History
Sep 1, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Oct 1, 2025
Data Sourced
via Microsoft·11:11 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·11:11 PM
Affected Software
Updated
via Microsoft·11:11 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the vulnerability ID for this Samba vulnerability?
The vulnerability ID for this Samba vulnerability is CVE-2022-32743.
2
What is the severity of CVE-2022-32743?
The severity of CVE-2022-32743 is high with a CVSS score of 7.5.
3
What is the affected software for this vulnerability?
The affected software for this vulnerability is Samba version 4.1.0 and later, and Fedora version 37.
4
What is the description of CVE-2022-32743?
CVE-2022-32743 is a vulnerability in Samba that allows unprivileged users to write the dNSHostName attribute without proper validation of the Validated-DNS-Host-Name right.
5
How can I fix CVE-2022-32743?
To fix CVE-2022-32743, update Samba to a version that includes the necessary patches or apply the recommended security updates provided by the vendor.