UBUNTU-CVE-2022-2127

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2022-2127

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2127.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-2127

Related

Published

2023-07-19T00:00:00Z

Modified

2023-07-19T00:00:00Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.

References

Affected packages

Ubuntu:Pro:14.04:LTS / samba

Package

Name: samba

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:3.*

2:3.6.18-1ubuntu3

2:4.*

2:4.0.10+dfsg-4ubuntu2

2:4.0.13+dfsg-1ubuntu1

2:4.1.3+dfsg-2ubuntu2

2:4.1.3+dfsg-2ubuntu3

2:4.1.3+dfsg-2ubuntu4

2:4.1.3+dfsg-2ubuntu5

2:4.1.6+dfsg-1ubuntu1

2:4.1.6+dfsg-1ubuntu2

2:4.1.6+dfsg-1ubuntu2.14.04.1

2:4.1.6+dfsg-1ubuntu2.14.04.2

2:4.1.6+dfsg-1ubuntu2.14.04.3

2:4.1.6+dfsg-1ubuntu2.14.04.4

2:4.1.6+dfsg-1ubuntu2.14.04.5

2:4.1.6+dfsg-1ubuntu2.14.04.7

2:4.1.6+dfsg-1ubuntu2.14.04.8

2:4.1.6+dfsg-1ubuntu2.14.04.9

2:4.1.6+dfsg-1ubuntu2.14.04.11

2:4.1.6+dfsg-1ubuntu2.14.04.12

2:4.1.6+dfsg-1ubuntu2.14.04.13

2:4.3.8+dfsg-0ubuntu0.14.04.2

2:4.3.9+dfsg-0ubuntu0.14.04.1

2:4.3.9+dfsg-0ubuntu0.14.04.3

2:4.3.11+dfsg-0ubuntu0.14.04.1

2:4.3.11+dfsg-0ubuntu0.14.04.2

2:4.3.11+dfsg-0ubuntu0.14.04.3

2:4.3.11+dfsg-0ubuntu0.14.04.4

2:4.3.11+dfsg-0ubuntu0.14.04.6

2:4.3.11+dfsg-0ubuntu0.14.04.7

2:4.3.11+dfsg-0ubuntu0.14.04.8

2:4.3.11+dfsg-0ubuntu0.14.04.9

2:4.3.11+dfsg-0ubuntu0.14.04.10

2:4.3.11+dfsg-0ubuntu0.14.04.11

2:4.3.11+dfsg-0ubuntu0.14.04.12

2:4.3.11+dfsg-0ubuntu0.14.04.13

2:4.3.11+dfsg-0ubuntu0.14.04.14

2:4.3.11+dfsg-0ubuntu0.14.04.16

2:4.3.11+dfsg-0ubuntu0.14.04.17

2:4.3.11+dfsg-0ubuntu0.14.04.19

2:4.3.11+dfsg-0ubuntu0.14.04.20

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:16.04:LTS / samba

Package

Name: samba

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:4.*

2:4.1.17+dfsg-4ubuntu2

2:4.1.20+dfsg-1ubuntu1

2:4.1.20+dfsg-1ubuntu2

2:4.1.20+dfsg-1ubuntu3

2:4.1.20+dfsg-1ubuntu5

2:4.3.3+dfsg-1ubuntu1

2:4.3.3+dfsg-1ubuntu2

2:4.3.3+dfsg-1ubuntu3

2:4.3.6+dfsg-1ubuntu1

2:4.3.8+dfsg-0ubuntu1

2:4.3.9+dfsg-0ubuntu0.16.04.1

2:4.3.9+dfsg-0ubuntu0.16.04.2

2:4.3.9+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.1

2:4.3.11+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.5

2:4.3.11+dfsg-0ubuntu0.16.04.6

2:4.3.11+dfsg-0ubuntu0.16.04.7

2:4.3.11+dfsg-0ubuntu0.16.04.8

2:4.3.11+dfsg-0ubuntu0.16.04.9

2:4.3.11+dfsg-0ubuntu0.16.04.10

2:4.3.11+dfsg-0ubuntu0.16.04.11

2:4.3.11+dfsg-0ubuntu0.16.04.12

2:4.3.11+dfsg-0ubuntu0.16.04.13

2:4.3.11+dfsg-0ubuntu0.16.04.15

2:4.3.11+dfsg-0ubuntu0.16.04.16

2:4.3.11+dfsg-0ubuntu0.16.04.17

2:4.3.11+dfsg-0ubuntu0.16.04.18

2:4.3.11+dfsg-0ubuntu0.16.04.19

2:4.3.11+dfsg-0ubuntu0.16.04.20

2:4.3.11+dfsg-0ubuntu0.16.04.21

2:4.3.11+dfsg-0ubuntu0.16.04.23

2:4.3.11+dfsg-0ubuntu0.16.04.24

2:4.3.11+dfsg-0ubuntu0.16.04.25

2:4.3.11+dfsg-0ubuntu0.16.04.26

2:4.3.11+dfsg-0ubuntu0.16.04.27

2:4.3.11+dfsg-0ubuntu0.16.04.28

2:4.3.11+dfsg-0ubuntu0.16.04.29

2:4.3.11+dfsg-0ubuntu0.16.04.30

2:4.3.11+dfsg-0ubuntu0.16.04.31

2:4.3.11+dfsg-0ubuntu0.16.04.32

2:4.3.11+dfsg-0ubuntu0.16.04.34

2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:Pro:18.04:LTS / samba

Package

Name: samba

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:4.*

2:4.6.7+dfsg-1ubuntu3

2:4.7.1+dfsg-1ubuntu1

2:4.7.3+dfsg-1ubuntu1

2:4.7.4+dfsg-1ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu2

2:4.7.6+dfsg~ubuntu-0ubuntu2.2

2:4.7.6+dfsg~ubuntu-0ubuntu2.4

2:4.7.6+dfsg~ubuntu-0ubuntu2.5

2:4.7.6+dfsg~ubuntu-0ubuntu2.6

2:4.7.6+dfsg~ubuntu-0ubuntu2.7

2:4.7.6+dfsg~ubuntu-0ubuntu2.9

2:4.7.6+dfsg~ubuntu-0ubuntu2.10

2:4.7.6+dfsg~ubuntu-0ubuntu2.11

2:4.7.6+dfsg~ubuntu-0ubuntu2.13

2:4.7.6+dfsg~ubuntu-0ubuntu2.14

2:4.7.6+dfsg~ubuntu-0ubuntu2.15

2:4.7.6+dfsg~ubuntu-0ubuntu2.16

2:4.7.6+dfsg~ubuntu-0ubuntu2.17

2:4.7.6+dfsg~ubuntu-0ubuntu2.18

2:4.7.6+dfsg~ubuntu-0ubuntu2.19

2:4.7.6+dfsg~ubuntu-0ubuntu2.20

2:4.7.6+dfsg~ubuntu-0ubuntu2.21

2:4.7.6+dfsg~ubuntu-0ubuntu2.23

2:4.7.6+dfsg~ubuntu-0ubuntu2.24

2:4.7.6+dfsg~ubuntu-0ubuntu2.26

2:4.7.6+dfsg~ubuntu-0ubuntu2.27

2:4.7.6+dfsg~ubuntu-0ubuntu2.28

2:4.7.6+dfsg~ubuntu-0ubuntu2.29

Ecosystem specific

{
    "ubuntu_priority": "medium"
}

Ubuntu:20.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.15.13+dfsg-0ubuntu0.20.04.3?arch=src?distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.15.13+dfsg-0ubuntu0.20.04.3

Affected versions

2:4.*

2:4.10.7+dfsg-0ubuntu2

2:4.10.7+dfsg-0ubuntu3

2:4.11.1+dfsg-3ubuntu1

2:4.11.1+dfsg-3ubuntu2

2:4.11.1+dfsg-3ubuntu4

2:4.11.5+dfsg-1ubuntu1

2:4.11.5+dfsg-1ubuntu2

2:4.11.6+dfsg-0ubuntu1

2:4.11.6+dfsg-0ubuntu1.1

2:4.11.6+dfsg-0ubuntu1.2

2:4.11.6+dfsg-0ubuntu1.3

2:4.11.6+dfsg-0ubuntu1.4

2:4.11.6+dfsg-0ubuntu1.5

2:4.11.6+dfsg-0ubuntu1.6

2:4.11.6+dfsg-0ubuntu1.8

2:4.11.6+dfsg-0ubuntu1.9

2:4.11.6+dfsg-0ubuntu1.10

2:4.13.14+dfsg-0ubuntu0.20.04.1

2:4.13.14+dfsg-0ubuntu0.20.04.2

2:4.13.14+dfsg-0ubuntu0.20.04.3

2:4.13.14+dfsg-0ubuntu0.20.04.4

2:4.13.17~dfsg-0ubuntu0.21.04.1

2:4.13.17~dfsg-0ubuntu0.21.04.2

2:4.13.17~dfsg-0ubuntu1.20.04.1

2:4.13.17~dfsg-0ubuntu1.20.04.2

2:4.13.17~dfsg-0ubuntu1.20.04.4

2:4.13.17~dfsg-0ubuntu1.20.04.5

2:4.15.13+dfsg-0ubuntu0.20.04.1

2:4.15.13+dfsg-0ubuntu0.20.04.2

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libwbclient-dev": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-libs": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "registry-tools": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-common-bin": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "libwbclient0-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-dsdb-modules-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "libpam-winbind-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "libnss-winbind-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "python3-samba-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "winbind": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-vfs-modules": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-common-bin-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-testsuite": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "smbclient-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "libsmbclient": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "libsmbclient-dev": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "libwbclient0": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-dsdb-modules": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "python3-samba": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-vfs-modules-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "registry-tools-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "ctdb": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "libnss-winbind": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "libsmbclient-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-libs-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "winbind-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-testsuite-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-common": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "libpam-winbind": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "smbclient": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "samba-dev": "2:4.15.13+dfsg-0ubuntu0.20.04.3",
            "ctdb-dbgsym": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        }
    ]
}

Ubuntu:22.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.15.13+dfsg-0ubuntu1.2?arch=src?distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.15.13+dfsg-0ubuntu1.2

Affected versions

2:4.*

2:4.13.5+dfsg-2ubuntu2

2:4.13.5+dfsg-2ubuntu3

2:4.13.14+dfsg-0ubuntu1

2:4.13.14+dfsg-0ubuntu2

2:4.15.5~dfsg-0ubuntu1

2:4.15.5~dfsg-0ubuntu2

2:4.15.5~dfsg-0ubuntu4

2:4.15.5~dfsg-0ubuntu5

2:4.15.5~dfsg-0ubuntu5.1

2:4.15.9+dfsg-0ubuntu0.2

2:4.15.9+dfsg-0ubuntu0.3

2:4.15.13+dfsg-0ubuntu1

2:4.15.13+dfsg-0ubuntu1.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libwbclient-dev": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-libs": "2:4.15.13+dfsg-0ubuntu1.2",
            "registry-tools": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-common-bin": "2:4.15.13+dfsg-0ubuntu1.2",
            "libwbclient0-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-dsdb-modules-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "libpam-winbind-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "libnss-winbind-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "python3-samba-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "winbind": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-vfs-modules": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-common-bin-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-testsuite": "2:4.15.13+dfsg-0ubuntu1.2",
            "smbclient-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "libsmbclient": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba": "2:4.15.13+dfsg-0ubuntu1.2",
            "libsmbclient-dev": "2:4.15.13+dfsg-0ubuntu1.2",
            "libwbclient0": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-dsdb-modules": "2:4.15.13+dfsg-0ubuntu1.2",
            "python3-samba": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-vfs-modules-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "registry-tools-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "ctdb": "2:4.15.13+dfsg-0ubuntu1.2",
            "libnss-winbind": "2:4.15.13+dfsg-0ubuntu1.2",
            "libsmbclient-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-libs-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "winbind-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-testsuite-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-common": "2:4.15.13+dfsg-0ubuntu1.2",
            "libpam-winbind": "2:4.15.13+dfsg-0ubuntu1.2",
            "smbclient": "2:4.15.13+dfsg-0ubuntu1.2",
            "samba-dev": "2:4.15.13+dfsg-0ubuntu1.2",
            "ctdb-dbgsym": "2:4.15.13+dfsg-0ubuntu1.2"
        }
    ]
}