Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-32744
8.8
HIGHCVSS v3
Published
August 25, 2022
Affected
2 projects
Assigned by
Red Hat
Severity scale
010
Description
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
Docker Hub
samba-team/sambaGitLab https://gitlab.com/samba-team/samba is the Official GitLab mirror of Samba https://www.samba.org
GitLab https://gitlab.com/samba-team/samba is the Official GitLab mirror of Samba https://www.samba.org >= 4.16.0, < 4.16.4, >= 4.15.0, < 4.15.9, >= 4.3.0, < 4.14.14NVD