CVE-2022-32742
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, a...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2022-32742 samba 修正版: 4.14.14-r0
- Debian DEBIAN-CVE-2022-32742 samba 修正版: 2:4.13.13+dfsg-1~deb11u5
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- web samba.org
- web lists.debian.org