Test Kennung:	1.3.6.1.4.1.25623.1.0.104258
Kategorie:	Denial of Service
Titel:	Samba DoS Vulnerability (CVE-2022-32745)
Zusammenfassung:	Samba is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: Samba is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Due to incorrect values used as the limit for a loop and as the 'count' parameter to memcpy(), the server, receiving a specially crafted message, leaves an array of structures partially uninitialised, or accesses an arbitrary element beyond the end of an array. Outcomes achievable by an attacker include segmentation faults and corresponding loss of availability. Depending on the contents of the uninitialised memory, confidentiality may also be affected. Affected Software/OS: Samba versions 4.13.x starting from 4.13.14, 4.14.x starting from 4.14.10 and prior to 4.14.14, 4.15.x starting from 4.15.2 and prior to 4.15.9, and 4.16.x prior to 4.16.4. Solution: Update to version 4.14.14, 4.15.9, 4.16.4 or later. CVSS Score: 9.4 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-32745 https://security.gentoo.org/glsa/202309-06 https://www.samba.org/samba/security/CVE-2022-32745.html
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.