ID de Prueba:	1.3.6.1.4.1.25623.1.0.104258
Categoría:	Denial of Service
Título:	Samba DoS Vulnerability (CVE-2022-32745)
Resumen:	Samba is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: Samba is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Due to incorrect values used as the limit for a loop and as the 'count' parameter to memcpy(), the server, receiving a specially crafted message, leaves an array of structures partially uninitialised, or accesses an arbitrary element beyond the end of an array. Outcomes achievable by an attacker include segmentation faults and corresponding loss of availability. Depending on the contents of the uninitialised memory, confidentiality may also be affected. Affected Software/OS: Samba versions 4.13.x starting from 4.13.14, 4.14.x starting from 4.14.10 and prior to 4.14.14, 4.15.x starting from 4.15.2 and prior to 4.15.9, and 4.16.x prior to 4.16.4. Solution: Update to version 4.14.14, 4.15.9, 4.16.4 or later. CVSS Score: 9.4 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2022-32745 https://security.gentoo.org/glsa/202309-06 https://www.samba.org/samba/security/CVE-2022-32745.html
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.