CVE-2022-32743: High severity Samba Samba vulnerability
Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.17.12+dfsg-0+deb12u4Fixed in 2:4.22.11+dfsg-0+deb13u1Fixed in 2:4.22.10+dfsg-0+deb13u2Fixed in 2:4.25.1+dfsg-1 - Upgrade
Upgrade
alpine/sambato a version that resolves this vulnerability.Fixed in 4.14.14-r0 - Upgrade
Upgrade
alpine/sambato a version that resolves this vulnerability.Fixed in 4.17.0-r0 - Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.17.2+dfsg-3
Event History
Frequently Asked Questions
What is the vulnerability ID for this Samba vulnerability?
The vulnerability ID for this Samba vulnerability is CVE-2022-32743.
What is the severity of CVE-2022-32743?
The severity of CVE-2022-32743 is high with a CVSS score of 7.5.
What is the affected software for this vulnerability?
The affected software for this vulnerability is Samba version 4.1.0 and later, and Fedora version 37.
What is the description of CVE-2022-32743?
CVE-2022-32743 is a vulnerability in Samba that allows unprivileged users to write the dNSHostName attribute without proper validation of the Validated-DNS-Host-Name right.
How can I fix CVE-2022-32743?
To fix CVE-2022-32743, update Samba to a version that includes the necessary patches or apply the recommended security updates provided by the vendor.