UBUNTU-CVE-2022-2127

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2022-2127

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-2127.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-2127

Upstream

CVE-2022-2127

Downstream

USN-6238-1

Related

USN-6238-1

Published

2023-07-19T00:00:00Z

Modified

2025-07-16T07:44:02.260294Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

An out-of-bounds read vulnerability was found in Samba due to insufficient length checks in winbinddpamauth_crap.c. When performing NTLM authentication, the client replies to cryptographic challenges back to the server. These replies have variable lengths, and Winbind fails to check the lan manager response length. When Winbind is used for NTLM authentication, a maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.

References

Affected packages

Ubuntu:Pro:14.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14?arch=source&distro=esm-infra-legacy/trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:3.*

2:3.6.18-1ubuntu3

2:4.*

2:4.0.10+dfsg-4ubuntu2

2:4.0.13+dfsg-1ubuntu1

2:4.1.3+dfsg-2ubuntu2

2:4.1.3+dfsg-2ubuntu3

2:4.1.3+dfsg-2ubuntu4

2:4.1.3+dfsg-2ubuntu5

2:4.1.6+dfsg-1ubuntu1

2:4.1.6+dfsg-1ubuntu2

2:4.1.6+dfsg-1ubuntu2.14.04.1

2:4.1.6+dfsg-1ubuntu2.14.04.2

2:4.1.6+dfsg-1ubuntu2.14.04.3

2:4.1.6+dfsg-1ubuntu2.14.04.4

2:4.1.6+dfsg-1ubuntu2.14.04.5

2:4.1.6+dfsg-1ubuntu2.14.04.7

2:4.1.6+dfsg-1ubuntu2.14.04.8

2:4.1.6+dfsg-1ubuntu2.14.04.9

2:4.1.6+dfsg-1ubuntu2.14.04.11

2:4.1.6+dfsg-1ubuntu2.14.04.12

2:4.1.6+dfsg-1ubuntu2.14.04.13

2:4.3.8+dfsg-0ubuntu0.14.04.2

2:4.3.9+dfsg-0ubuntu0.14.04.1

2:4.3.9+dfsg-0ubuntu0.14.04.3

2:4.3.11+dfsg-0ubuntu0.14.04.1

2:4.3.11+dfsg-0ubuntu0.14.04.2

2:4.3.11+dfsg-0ubuntu0.14.04.3

2:4.3.11+dfsg-0ubuntu0.14.04.4

2:4.3.11+dfsg-0ubuntu0.14.04.6

2:4.3.11+dfsg-0ubuntu0.14.04.7

2:4.3.11+dfsg-0ubuntu0.14.04.8

2:4.3.11+dfsg-0ubuntu0.14.04.9

2:4.3.11+dfsg-0ubuntu0.14.04.10

2:4.3.11+dfsg-0ubuntu0.14.04.11

2:4.3.11+dfsg-0ubuntu0.14.04.12

2:4.3.11+dfsg-0ubuntu0.14.04.13

2:4.3.11+dfsg-0ubuntu0.14.04.14

2:4.3.11+dfsg-0ubuntu0.14.04.16

2:4.3.11+dfsg-0ubuntu0.14.04.17

2:4.3.11+dfsg-0ubuntu0.14.04.19

2:4.3.11+dfsg-0ubuntu0.14.04.20

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14

Ubuntu:Pro:16.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3?arch=source&distro=esm-infra/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:4.*

2:4.1.17+dfsg-4ubuntu2

2:4.1.20+dfsg-1ubuntu1

2:4.1.20+dfsg-1ubuntu2

2:4.1.20+dfsg-1ubuntu3

2:4.1.20+dfsg-1ubuntu5

2:4.3.3+dfsg-1ubuntu1

2:4.3.3+dfsg-1ubuntu2

2:4.3.3+dfsg-1ubuntu3

2:4.3.6+dfsg-1ubuntu1

2:4.3.8+dfsg-0ubuntu1

2:4.3.9+dfsg-0ubuntu0.16.04.1

2:4.3.9+dfsg-0ubuntu0.16.04.2

2:4.3.9+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.1

2:4.3.11+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.5

2:4.3.11+dfsg-0ubuntu0.16.04.6

2:4.3.11+dfsg-0ubuntu0.16.04.7

2:4.3.11+dfsg-0ubuntu0.16.04.8

2:4.3.11+dfsg-0ubuntu0.16.04.9

2:4.3.11+dfsg-0ubuntu0.16.04.10

2:4.3.11+dfsg-0ubuntu0.16.04.11

2:4.3.11+dfsg-0ubuntu0.16.04.12

2:4.3.11+dfsg-0ubuntu0.16.04.13

2:4.3.11+dfsg-0ubuntu0.16.04.15

2:4.3.11+dfsg-0ubuntu0.16.04.16

2:4.3.11+dfsg-0ubuntu0.16.04.17

2:4.3.11+dfsg-0ubuntu0.16.04.18

2:4.3.11+dfsg-0ubuntu0.16.04.19

2:4.3.11+dfsg-0ubuntu0.16.04.20

2:4.3.11+dfsg-0ubuntu0.16.04.21

2:4.3.11+dfsg-0ubuntu0.16.04.23

2:4.3.11+dfsg-0ubuntu0.16.04.24

2:4.3.11+dfsg-0ubuntu0.16.04.25

2:4.3.11+dfsg-0ubuntu0.16.04.26

2:4.3.11+dfsg-0ubuntu0.16.04.27

2:4.3.11+dfsg-0ubuntu0.16.04.28

2:4.3.11+dfsg-0ubuntu0.16.04.29

2:4.3.11+dfsg-0ubuntu0.16.04.30

2:4.3.11+dfsg-0ubuntu0.16.04.31

2:4.3.11+dfsg-0ubuntu0.16.04.32

2:4.3.11+dfsg-0ubuntu0.16.04.34

2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1

2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2

2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3

Ubuntu:Pro:18.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2?arch=source&distro=esm-infra/bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2:4.*

2:4.6.7+dfsg-1ubuntu3

2:4.7.1+dfsg-1ubuntu1

2:4.7.3+dfsg-1ubuntu1

2:4.7.4+dfsg-1ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu2

2:4.7.6+dfsg~ubuntu-0ubuntu2.2

2:4.7.6+dfsg~ubuntu-0ubuntu2.4

2:4.7.6+dfsg~ubuntu-0ubuntu2.5

2:4.7.6+dfsg~ubuntu-0ubuntu2.6

2:4.7.6+dfsg~ubuntu-0ubuntu2.7

2:4.7.6+dfsg~ubuntu-0ubuntu2.9

2:4.7.6+dfsg~ubuntu-0ubuntu2.10

2:4.7.6+dfsg~ubuntu-0ubuntu2.11

2:4.7.6+dfsg~ubuntu-0ubuntu2.13

2:4.7.6+dfsg~ubuntu-0ubuntu2.14

2:4.7.6+dfsg~ubuntu-0ubuntu2.15

2:4.7.6+dfsg~ubuntu-0ubuntu2.16

2:4.7.6+dfsg~ubuntu-0ubuntu2.17

2:4.7.6+dfsg~ubuntu-0ubuntu2.18

2:4.7.6+dfsg~ubuntu-0ubuntu2.19

2:4.7.6+dfsg~ubuntu-0ubuntu2.20

2:4.7.6+dfsg~ubuntu-0ubuntu2.21

2:4.7.6+dfsg~ubuntu-0ubuntu2.23

2:4.7.6+dfsg~ubuntu-0ubuntu2.24

2:4.7.6+dfsg~ubuntu-0ubuntu2.26

2:4.7.6+dfsg~ubuntu-0ubuntu2.27

2:4.7.6+dfsg~ubuntu-0ubuntu2.28

2:4.7.6+dfsg~ubuntu-0ubuntu2.29

2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1

2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2

Ubuntu:20.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.15.13+dfsg-0ubuntu0.20.04.3?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.15.13+dfsg-0ubuntu0.20.04.3

Affected versions

2:4.*

2:4.10.7+dfsg-0ubuntu2

2:4.10.7+dfsg-0ubuntu3

2:4.11.1+dfsg-3ubuntu1

2:4.11.1+dfsg-3ubuntu2

2:4.11.1+dfsg-3ubuntu4

2:4.11.5+dfsg-1ubuntu1

2:4.11.5+dfsg-1ubuntu2

2:4.11.6+dfsg-0ubuntu1

2:4.11.6+dfsg-0ubuntu1.1

2:4.11.6+dfsg-0ubuntu1.2

2:4.11.6+dfsg-0ubuntu1.3

2:4.11.6+dfsg-0ubuntu1.4

2:4.11.6+dfsg-0ubuntu1.5

2:4.11.6+dfsg-0ubuntu1.6

2:4.11.6+dfsg-0ubuntu1.8

2:4.11.6+dfsg-0ubuntu1.9

2:4.11.6+dfsg-0ubuntu1.10

2:4.13.14+dfsg-0ubuntu0.20.04.1

2:4.13.14+dfsg-0ubuntu0.20.04.2

2:4.13.14+dfsg-0ubuntu0.20.04.3

2:4.13.14+dfsg-0ubuntu0.20.04.4

2:4.13.17~dfsg-0ubuntu0.21.04.1

2:4.13.17~dfsg-0ubuntu0.21.04.2

2:4.13.17~dfsg-0ubuntu1.20.04.1

2:4.13.17~dfsg-0ubuntu1.20.04.2

2:4.13.17~dfsg-0ubuntu1.20.04.4

2:4.13.17~dfsg-0ubuntu1.20.04.5

2:4.15.13+dfsg-0ubuntu0.20.04.1

2:4.15.13+dfsg-0ubuntu0.20.04.2

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ctdb",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "ctdb-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libnss-winbind-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libpam-winbind-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libsmbclient-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libsmbclient-dev",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libwbclient-dev",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "libwbclient0-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "python3-samba",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "python3-samba-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "registry-tools-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-common-bin-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-dev",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-dsdb-modules-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-libs-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-testsuite-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "samba-vfs-modules-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "smbclient-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        },
        {
            "binary_name": "winbind-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.3"
        }
    ]
}

Ubuntu:22.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.15.13+dfsg-0ubuntu1.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.15.13+dfsg-0ubuntu1.2

Affected versions

2:4.*

2:4.13.5+dfsg-2ubuntu2

2:4.13.5+dfsg-2ubuntu3

2:4.13.14+dfsg-0ubuntu1

2:4.13.14+dfsg-0ubuntu2

2:4.15.5~dfsg-0ubuntu1

2:4.15.5~dfsg-0ubuntu2

2:4.15.5~dfsg-0ubuntu4

2:4.15.5~dfsg-0ubuntu5

2:4.15.5~dfsg-0ubuntu5.1

2:4.15.9+dfsg-0ubuntu0.2

2:4.15.9+dfsg-0ubuntu0.3

2:4.15.13+dfsg-0ubuntu1

2:4.15.13+dfsg-0ubuntu1.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "ctdb",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "ctdb-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libnss-winbind-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libpam-winbind-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libsmbclient-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libsmbclient-dev",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libwbclient-dev",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "libwbclient0-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "python3-samba",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "python3-samba-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "registry-tools-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-common-bin-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-dev",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-dsdb-modules-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-libs-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-testsuite-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "samba-vfs-modules-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "smbclient-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        },
        {
            "binary_name": "winbind-dbgsym",
            "binary_version": "2:4.15.13+dfsg-0ubuntu1.2"
        }
    ]
}