vulnerability

Huawei EulerOS: CVE-2022-32746: samba security update

Severity
6
CVSS
(AV:N/AC:L/Au:S/C:N/I:P/A:P)
Published
08/25/2022
Added
11/03/2022
Modified
01/28/2025

Description

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.

Solution(s)

huawei-euleros-2_0_sp10-upgrade-libsmbclienthuawei-euleros-2_0_sp10-upgrade-libwbclienthuawei-euleros-2_0_sp10-upgrade-sambahuawei-euleros-2_0_sp10-upgrade-samba-clienthuawei-euleros-2_0_sp10-upgrade-samba-commonhuawei-euleros-2_0_sp10-upgrade-samba-common-toolshuawei-euleros-2_0_sp10-upgrade-samba-libshuawei-euleros-2_0_sp10-upgrade-samba-winbindhuawei-euleros-2_0_sp10-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp10-upgrade-samba-winbind-modules
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.