CVE-2022-2127

Publication date 19 July 2023

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
samba	24.04 LTS noble	Fixed 2:4.18.5+dfsg-1ubuntu1
	23.10 mantic	Fixed 2:4.18.5+dfsg-1ubuntu1
	23.04 lunar	Fixed 2:4.17.7+dfsg-1ubuntu1.1
	22.10 kinetic	Fixed 2:4.16.8+dfsg-0ubuntu1.2
	22.04 LTS jammy	Fixed 2:4.15.13+dfsg-0ubuntu1.2
	20.04 LTS focal	Fixed 2:4.15.13+dfsg-0ubuntu0.20.04.3
	18.04 LTS bionic	Needs evaluation
	16.04 LTS xenial	Needs evaluation
	14.04 LTS trusty	Needs evaluation

Severity score breakdown

Parameter	Value
Base score	5.9 · Medium
Attack vector	Network
Attack complexity	High
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

Related Ubuntu Security Notices (USN)