SUSE-SU-2023:0081-1: samba&distro=SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2023:0081-1 is a vulnerability in samba&distro=SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 12-01-2023
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for samba This update for samba fixes the following issues: - Updated to version 4.15.13: - CVE-2022-38023: Removed weak cryptographic algorithms from the Netlogon RPC implementation (bsc#1206504). - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on 32-bit systems (bsc#1205126). - CVE-2022-3437: Fixed a buffer overflow in Heimdal unwrap_des3() (bsc#1204254). - CVE-2022-32742: Fixed an information disclosure issue affecting SMB1 servers (bsc#1201496). - CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490). - CVE-2022-2031: Fixed an AD restriction bypass associated with changing passwords (bsc#1201495). - CVE-2022-32745: Fixed a remote server crash that could be triggered with certain LDAP requests (bsc#1201492). - CVE-2022-32744: Fixed an issue where AD users could have forged password change requests on behalf of other users (bsc#1201493). Other fixes: - Fixed a potential crash due to a concurrency issue (bsc#1200102).

No weakness data has been published for this record.