CVE-2022-32742

Published: Aug 25, 2022Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

A flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).

Affected (3)

Products: Samba: Samba

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Samba Samba	Before 4.14.14
Samba Samba	From 4.15.0 to 4.15.9
Samba Samba	From 4.16.0 to 4.16.4

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html

Source: secalert@redhat.com

https://security.gentoo.org/glsa/202309-06

Source: secalert@redhat.com

https://www.samba.org/samba/security/CVE-2022-32742.html

Source: secalert@redhat.com

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/202309-06

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.samba.org/samba/security/CVE-2022-32742.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.