MGASA-2022-0299

Advisory lineage Upstream: 5 Downstream: 0
Published: 25 Aug 2022, 21:21
Last modified:16 Apr 2026, 04:23

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Aug 2022, 21:21
Published
Vulnerability first disclosed
16 Apr 2026, 04:23
Last Modified
Vulnerability information updated

Description

Updated ldb/samba/sssd packages fix security vulnerability Fixed AD restrictions bypass associated with changing passwords (bsc#1201495). (CVE-2022-2031) Fixed a memory leak in SMB1 (bsc#1201496). (CVE-2022-32742) Fixed an arbitrary password change request for any AD user (bsc#1201493). (CVE-2022-32744) Fixed a remote server crash with an LDAP add or modify request (bsc#1201492) (CVE-2022-32745) Fixed a use-after-free occurring in database audit logging (bsc#1201490). (CVE-2022-32746)

Affected Systems

  • mageia•ldb

    < 2.3.4-1.mga8

  • mageia•samba

    < 4.14.14-1.mga8

  • mageia•sssd

    < 2.4.0-1.4.mga8

References (11)