Logo
›
›vulnerability›CVE-2022-2127
Name
CVE-2022-2127
Source
NVD ( link)Debian ( link)
Description
An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.
CWEs
CWE-125 CWE-125
Published Date
Updated Date
Workaround
-
Advisories
https://access.redhat.com/errata/RHSA-2023:6667Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7139Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-2127Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2222791Issue Tracking
https://www.samba.org/samba/security/CVE-2022-2127.htmlMitigation
https://access.redhat.com/errata/RHSA-2023:6667Third Party Advisory
https://access.redhat.com/errata/RHSA-2023:7139Third Party Advisory
https://access.redhat.com/security/cve/CVE-2022-2127Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2222791Issue Tracking
https://www.samba.org/samba/security/CVE-2022-2127.htmlMitigation

Analysis#

Affected Component
Analysis
samba
Patched

Vulnerability Ratings#

5.9
CVSSv31
5.9
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
samba4
buildroot
2025.02.x
4.22.10
Not Affected
samba4
buildroot
master
4.24.3
Not Affected
samba4
openwrt
master
4.22.7-r3
Not Affected
samba4
openwrt
openwrt-25.12
4.22.7-r3
Not Affected
samba
yocto
master
4.23.5
Not Affected
samba
yocto
scarthgap
4.19.9
Not Affected

Resolved with patches#

samba (yocto:kirkstone)

#
Title
Author
Resolve
1
CVE-2022-2127: ntlm_auth: cap lanman response length value
Ralph Boehme <slow@samba.org>
CVE-2022-2127