CVE-2022-32744
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-32744 samba Corrigé dans: 4.15.12-r0
- Debian DEBIAN-CVE-2022-32744 samba Corrigé dans: 2:4.13.13+dfsg-1~deb11u5
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- web samba.org