CVE-2022-32746

Source
https://cve.org/CVERecord?id=CVE-2022-32746
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-32746.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-32746
Downstream
ALPINE (1)
ALSA (2)
AZL (3)
CLEANSTART (1)
DEBIAN (1)
ECHO (1)
MGASA (1)
OESA (4)
openSUSE (2)
RHSA (2)
RLSA (2)
SUSE (9)
UBUNTU (1)
Related
Published
2022-08-25T00:00:00Z
Modified
2026-10-28T02:30:45Z
Summary
[none]
Details

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.

Database specific
{
    "cna_assigner": "redhat",
    "cwe_ids": [
        "CWE-416"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32746.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "Versions prior to samba 4.16.4, samba 4.15.9, samba 4.14.14"
                        },
                        {
                            "last_affected": "Versions prior to samba 4.16.4, samba 4.15.9, samba 4.14.14"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandaloneSingleVersion"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type
GIT
Repo
https://github.com/samba-team/samba
Events
Database specific
Show details
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "4.3.0"
                },
                {
                    "fixed": "4.14.14"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "4.15.0"
                },
                {
                    "fixed": "4.15.9"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "4.16.0"
                },
                {
                    "fixed": "4.16.4"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

ldb-2.*
ldb-2.4.1
ldb-2.4.2
ldb-2.4.3
ldb-2.4.4
ldb-2.5.1
ldb-2.5.2
samba-4.*
samba-4.15.0
samba-4.15.1
samba-4.15.2
samba-4.15.3
samba-4.15.4
samba-4.15.6
samba-4.15.7
samba-4.15.8
samba-4.16.0
samba-4.16.1
samba-4.16.2
samba-4.16.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-32746.json"