CVE-2022-2127

20.07.2023, 15:15

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbindd_pam_auth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 71%

Affected Products (NVD)

Vendor	Product	Version
samba	samba	4.16.0 ≤ 𝑥 < 4.16.10
samba	samba	4.17.0 ≤ 𝑥 < 4.17.9
samba	samba	4.18.0 ≤ 𝑥 < 4.18.4
redhat	enterprise_linux	6.0
redhat	enterprise_linux	7.0
redhat	enterprise_linux	8.0
redhat	enterprise_linux	9.0
debian	debian_linux	12.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

samba

bookworm	2:4.17.12+dfsg-0+deb12u1 fixed
bookworm (security)	2:4.17.12+dfsg-0+deb12u1 fixed
bullseye	2:4.13.13+dfsg-1~deb11u6 fixed
bullseye (security)	2:4.13.13+dfsg-1~deb11u6 fixed
sid	2:4.21.1+dfsg-2 fixed
trixie	2:4.21.1+dfsg-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

samba

bionic	needs-triage
focal	Fixed 2:4.15.13+dfsg-0ubuntu0.20.04.3 released
jammy	Fixed 2:4.15.13+dfsg-0ubuntu1.2 released
kinetic	Fixed 2:4.16.8+dfsg-0ubuntu1.2 released
lunar	Fixed 2:4.17.7+dfsg-1ubuntu1.1 released
mantic	Fixed 2:4.18.5+dfsg-1ubuntu1 released
noble	Fixed 2:4.18.5+dfsg-1ubuntu1 released
trusty	needs-triage
xenial	needs-triage

Red Hat Enterprise Linux Releases

Red Hat Product

Release

ctdb

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

libnetapi

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

libnetapi-devel

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

libsmbclient

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

libsmbclient-devel

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

libwbclient

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

libwbclient-devel

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

python3-samba

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

python3-samba-dc

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

python3-samba-devel

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

python3-samba-test

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-client

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-client-libs

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-common

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-common-libs

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-common-tools

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-dc-libs

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-dcerpc

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-devel

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-krb5-printing

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-ldb-ldap-modules

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-libs

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-pidl

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-test

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-test-libs

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-tools

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-usershares

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-vfs-iouring

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-winbind

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-winbind-clients

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-winbind-krb5-locator

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-winbind-modules

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

samba-winexe

RHEL 8	0:4.18.6-1.el8 fixed
RHEL 8.6 AUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 E4S	0:4.15.5-15.el8_6 fixed
RHEL 8.6 EUS	0:4.15.5-15.el8_6 fixed
RHEL 8.6 TUS	0:4.15.5-15.el8_6 fixed
RHEL 8.8 AUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 E4S	0:4.17.5-5.el8_8 fixed
RHEL 8.8 EUS	0:4.17.5-5.el8_8 fixed
RHEL 8.8 TUS	0:4.17.5-5.el8_8 fixed
RHEL 9	0:4.18.6-100.el9 fixed

Amazon Linux Releases

Amazon Package

Release

ctdb

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed

ctdb-tests

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed

libnetapi

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

libnetapi-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

libnetapi-devel

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

libsmbclient

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

libsmbclient-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

libsmbclient-devel

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

libwbclient

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

libwbclient-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

libwbclient-devel

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

python3-samba

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

python3-samba-dc

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

python3-samba-dc-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

python3-samba-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

python3-samba-devel

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

python3-samba-test

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-client

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-client-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-client-libs

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-client-libs-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-common

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-common-libs

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-common-libs-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-common-tools

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-common-tools-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-dc

Amazon Linux 2

0:4.10.16-24.amzn2.0.4

fixed

samba-dc-libs

Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-dc-libs-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-dcerpc

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-dcerpc-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-debuginfo

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-debugsource

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-devel

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-krb5-printing

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-krb5-printing-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-ldb-ldap-modules

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-ldb-ldap-modules-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-libs

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-libs-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-pidl

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-python

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed

samba-python-test

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed

samba-test

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-test-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-test-libs

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-test-libs-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-tools

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-usershares

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-vfs-glusterfs

Amazon Linux 2

0:4.10.16-24.amzn2.0.4

fixed

samba-vfs-iouring

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-vfs-iouring-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-winbind

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-winbind-clients

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-winbind-clients-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-winbind-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-winbind-krb5-locator

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-winbind-krb5-locator-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

samba-winbind-modules

Amazon Linux 1	0:4.10.16-24.68.amzn1 fixed
Amazon Linux 2	0:4.10.16-24.amzn2.0.4 fixed
Amazon Linux 2023	2:4.17.10-0.amzn2023.0.1 fixed

samba-winbind-modules-debuginfo

Amazon Linux 2023

2:4.17.10-0.amzn2023.0.1

fixed

Common Weakness Enumeration

CWE-125 - Out-of-bounds Read
The software reads data past the end, or before the beginning, of the intended buffer.

References

https://access.redhat.com/errata/RHSA-2023:6667

https://access.redhat.com/errata/RHSA-2023:7139

https://access.redhat.com/errata/RHSA-2024:0423

https://access.redhat.com/errata/RHSA-2024:0580

https://access.redhat.com/security/cve/CVE-2022-2127

https://bugzilla.redhat.com/show_bug.cgi?id=2222791

https://www.samba.org/samba/security/CVE-2022-2127.html

https://access.redhat.com/errata/RHSA-2023:6667

https://access.redhat.com/errata/RHSA-2023:7139

https://access.redhat.com/errata/RHSA-2024:0423

https://access.redhat.com/errata/RHSA-2024:0580

https://access.redhat.com/security/cve/CVE-2022-2127

https://bugzilla.redhat.com/show_bug.cgi?id=2222791

https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPCSGND7LO467AJGR5DYBGZLTCGTOBCC/

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OT74M42E6C36W7PQVY3OS4ZM7DVYB64Z/

https://security.netapp.com/advisory/ntap-20230731-0010/

https://www.debian.org/security/2023/dsa-5477

https://www.samba.org/samba/security/CVE-2022-2127.html