ALPINE-CVE-2022-32746
Advisory lineage Upstream: 1 Downstream: 0
Upstream
Published: 25 Aug 2022, 18:15
Last modified:08 Jul 2026, 04:31
Vulnerability Summary
Overall Risk (default)
low
22/100 CVSS Score
5.4 MEDIUM
3.1 (osv_alpine)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
25 Aug 2022, 18:15
Published
Vulnerability first disclosed
08 Jul 2026, 04:31
Last Modified
Vulnerability information updated
Description
A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected Systems
- alpine•samba
< 4.14.14-r0 | < 4.15.12-r0 | < 4.15.12-r0 | < 4.15.9-r0 | < 4.15.9-r0 | < 4.15.9-r0 | < 4.15.9-r0 | < 4.15.9-r0 | < 4.15.9-r0 | < 4.15.9-r0 | < 4.15.9-r0 | ≥ 4.3.0, < 4.14.14-r0 | ≥ 4.3.0, < 4.15.12-r0 | ≥ 4.3.0, < 4.15.12-r0 | ≥ 4.3.0, < 4.15.9-r0 | ≥ 4.3.0, < 4.15.9-r0 | ≥ 4.3.0, < 4.15.9-r0 | ≥ 4.3.0, < 4.15.9-r0 | ≥ 4.3.0, < 4.15.9-r0 | ≥ 4.3.0, < 4.15.9-r0 | ≥ 4.3.0, < 4.15.9-r0 | ≥ 4.3.0, < 4.15.9-r0