CVE-2022-32745: High severity Samba Samba vulnerability
A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.17.12+dfsg-0+deb12u4Fixed in 2:4.22.11+dfsg-0+deb13u1Fixed in 2:4.22.10+dfsg-0+deb13u2Fixed in 2:4.25.1+dfsg-1 - Upgrade
Upgrade
alpine/sambato a version that resolves this vulnerability.Fixed in 4.14.14-r0 - Upgrade
Upgrade
alpine/sambato a version that resolves this vulnerability.Fixed in 4.15.12-r0 - Upgrade
Upgrade
alpine/sambato a version that resolves this vulnerability.Fixed in 4.15.9-r0 - Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.16.4+dfsg-1
Event History
Frequently Asked Questions
What is CVE-2022-32745?
CVE-2022-32745 is a vulnerability found in Samba that allows AD users to cause the server to access uninitialized data, leading to a segmentation fault.
How does CVE-2022-32745 affect Samba?
CVE-2022-32745 affects Samba versions 4.13.14 to 4.14.14, 4.15.2 to 4.15.9, and 4.16.0 to 4.16.4.
What is the severity of CVE-2022-32745?
CVE-2022-32745 has a severity rating of 8.1, which is considered high.
How can Samba AD users exploit CVE-2022-32745?
Samba AD users can exploit CVE-2022-32745 by sending an LDAP add or modify request that causes the server to access uninitialized data.
Are there any references for CVE-2022-32745?
Yes, you can find references for CVE-2022-32745 at the following links: [https://security.gentoo.org/glsa/202309-06](https://security.gentoo.org/glsa/202309-06) and [https://www.samba.org/samba/security/CVE-2022-32745.html](https://www.samba.org/samba/security/CVE-2022-32745.html).