CVE-2022-32744
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key...
Original description
The description as published by the source.
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-32744 samba Fixed in: 4.15.12-r0
- Debian DEBIAN-CVE-2022-32744 samba Fixed in: 2:4.13.13+dfsg-1~deb11u5
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- web samba.org