Test ID:	1.3.6.1.4.1.25623.1.0.845459
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-5542-1)
Summary:	The remote host is missing an update for the 'samba' package(s) announced via the USN-5542-1 advisory.
Description:	Summary: The remote host is missing an update for the 'samba' package(s) announced via the USN-5542-1 advisory. Vulnerability Insight: It was discovered that Samba did not handle MaxQueryDuration when being used in AD DC configurations, contrary to expectations. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-3670) Luke Howard discovered that Samba incorrectly handled certain restrictions associated with changing passwords. A remote attacker being requested to change passwords could possibly use this issue to escalate privileges. (CVE-2022-2031) Luca Moro discovered that Samba incorrectly handled certain SMB1 communications. A remote attacker could possibly use this issue to obtain sensitive memory contents. (CVE-2022-32742) Joseph Sutton discovered that Samba incorrectly handled certain password change requests. A remote attacker could use this issue to change passwords of other users, resulting in privilege escalation. (CVE-2022-32744) Joseph Sutton discovered that Samba incorrectly handled certain LDAP add or modify requests. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2022-32745) Joseph Sutton and Andrew Bartlett discovered that Samba incorrectly handled certain LDAP add or modify requests. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2022-32746) Affected Software/OS: 'samba' package(s) on Ubuntu 20.04, Ubuntu 22.04. Solution: Please install the updated package(s). CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-3670 https://security.gentoo.org/glsa/202309-06 https://bugzilla.redhat.com/show_bug.cgi?id=2077533 https://bugzilla.samba.org/show_bug.cgi?id=14694 https://gitlab.com/samba-team/samba/-/commit/1d5b155619bc532c46932965b215bd73a920e56f https://gitlab.com/samba-team/samba/-/commit/2b3af3b560c9617a233c131376c870fce146c002 https://gitlab.com/samba-team/samba/-/commit/3507e96b3dcf0c0b8eff7b2c08ffccaf0812a393 https://gitlab.com/samba-team/samba/-/commit/5f0590362c5c0c5ee20503a67467f9be2d50e73b https://gitlab.com/samba-team/samba/-/commit/86fe9d48883f87c928bf31ccbd275db420386803 https://gitlab.com/samba-team/samba/-/commit/dcfcafdbf756e12d9077ad7920eea25478c29f81 https://gitlab.com/samba-team/samba/-/commit/e1ab0c43629686d1d2c0b0b2bcdc90057a792049 Common Vulnerability Exposure (CVE) ID: CVE-2022-2031 https://www.samba.org/samba/security/CVE-2022-2031.html Common Vulnerability Exposure (CVE) ID: CVE-2022-32742 https://www.samba.org/samba/security/CVE-2022-32742.html https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html Common Vulnerability Exposure (CVE) ID: CVE-2022-32744 https://www.samba.org/samba/security/CVE-2022-32744.html Common Vulnerability Exposure (CVE) ID: CVE-2022-32745 https://www.samba.org/samba/security/CVE-2022-32745.html Common Vulnerability Exposure (CVE) ID: CVE-2022-32746 https://www.samba.org/samba/security/CVE-2022-32746.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.