CVE-2022-32742
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, a...
Original description
The description as published by the source.
A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-32742 samba Fixed in: 4.14.14-r0
- Debian DEBIAN-CVE-2022-32742 samba Fixed in: 2:4.13.13+dfsg-1~deb11u5
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- web samba.org
- web lists.debian.org