CVE-2022-3437
A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2022-3437 heimdal 修正版: 7.7.1-r0
- Debian DEBIAN-CVE-2022-3437 heimdal 修正版: 7.7.0+dfsg-2+deb11u2
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory security.gentoo.org
- advisory security.netapp.com
- report bugzilla.redhat.com
- web access.redhat.com
- web samba.org
- web openwall.com
- web lists.debian.org