CVE catalog

CVE-2022-3437

samba: CVE-2022-3437

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Published
Source
[NVD] · [CVE record]
EPSS
3.69% · Oct 22, 2026

A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansambasid2:4.25.0+dfsg-1fixed
Debiansambaforky2:4.25.0+dfsg-1fixed
Debiansambatrixie2:4.22.11+dfsg-0+deb13u1fixed
Debiansambatrixie-security2:4.22.10+dfsg-0+deb13u2fixed
Debiansambabookworm2:4.17.12+dfsg-0+deb12u4fixed
Debiansambabookworm-security2:4.17.12+dfsg-0+deb12u4fixed
Debianheimdalsid7.8.git20240113.1b4565a+dfsg-2fixed
Debianheimdalforky7.8.git20240113.1b4565a+dfsg-2fixed
Debianheimdaltrixie7.8.git20221117.28daf24+dfsg-9+deb13u1fixed
Debianheimdalbookworm7.8.git20221117.28daf24+dfsg-2fixed
Ubuntusambapro2:4.6.7+dfsg-1ubuntu3vulnerable
Ubuntusambapro2:4.7.1+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.3+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.4+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.4vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.5vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.6vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.7vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.9vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.10vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.11vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.13vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.14vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.15vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.16vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.17vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.18vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.19vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.20vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.21vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.23vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.24vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.26vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.27vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.28vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1fixed
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu2vulnerable
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu3vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu1vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu2vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu4vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu1vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.3vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.4vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.5vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.6vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.8vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.9vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.10vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.3vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.5vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.1fixed
Ubuntuheimdalpro1.6~rc2+dfsg-10ubuntu1vulnerable
Ubuntuheimdalpro1.7~git20150920+dfsg-4ubuntu1vulnerable
Ubuntuheimdalpro1.7~git20150920+dfsg-4ubuntu1.16.04.1vulnerable
Ubuntuheimdalpro1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1vulnerable
Ubuntuheimdalpro1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm2vulnerable
Ubuntuheimdalpro1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3fixed
Ubuntusambapro2:4.6.7+dfsg-1ubuntu3vulnerable
Ubuntusambapro2:4.7.1+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.3+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.4+dfsg-1ubuntu1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu1vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.2vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.4vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.5vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.6vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.7vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.9vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.10vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.11vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.13vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.14vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.15vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.16vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.17vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.18vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.19vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.20vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.21vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.23vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.24vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.26vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.27vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.28vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29vulnerable
Ubuntusambapro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1fixed
Ubuntuheimdal18.047.4.0.dfsg.1-2vulnerable
Ubuntuheimdal18.047.5.0+dfsg-1vulnerable
Ubuntuheimdal18.047.5.0+dfsg-1ubuntu0.1vulnerable
Ubuntuheimdal18.047.5.0+dfsg-1ubuntu0.2vulnerable
Ubuntuheimdal18.047.5.0+dfsg-1ubuntu0.3fixed
Ubuntuheimdal20.047.5.0+dfsg-3build1vulnerable
Ubuntuheimdal20.047.7.0+dfsg-1vulnerable
Ubuntuheimdal20.047.7.0+dfsg-1ubuntu1vulnerable
Ubuntuheimdal20.047.7.0+dfsg-1ubuntu1.1vulnerable
Ubuntuheimdal20.047.7.0+dfsg-1ubuntu1.2vulnerable
Ubuntuheimdal20.047.7.0+dfsg-1ubuntu1.3fixed
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu2vulnerable
Ubuntusamba20.042:4.10.7+dfsg-0ubuntu3vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu1vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu2vulnerable
Ubuntusamba20.042:4.11.1+dfsg-3ubuntu4vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu1vulnerable
Ubuntusamba20.042:4.11.5+dfsg-1ubuntu2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.1vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.2vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.3vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.4vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.5vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.6vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.8vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.9vulnerable
Ubuntusamba20.042:4.11.6+dfsg-0ubuntu1.10vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.1vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.2vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.3vulnerable
Ubuntusamba20.042:4.13.14+dfsg-0ubuntu0.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu0.21.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.1vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.2vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.4vulnerable
Ubuntusamba20.042:4.13.17~dfsg-0ubuntu1.20.04.5vulnerable
Ubuntusamba20.042:4.15.13+dfsg-0ubuntu0.20.04.1fixed
Ubuntuheimdal22.047.7.0+dfsg-2ubuntu2vulnerable
Ubuntuheimdal22.047.7.0+dfsg-3ubuntu1vulnerable
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu2vulnerable
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu3vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu4vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5.1vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.2vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.3vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1fixed
Opensusesambatumbleweed4.17.2+git.273.a55a83528b9-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansambasourcesid2:4.16.6+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourceforky2:4.16.6+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourcetrixie2:4.16.6+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourcebookworm2:4.16.6+dfsg-1not yet assignedNot reportedNot reported
Debianheimdalsourcesid7.8.git20221115.a6cf945+dfsg-1not yet assignedNot reported[1024187]
Debianheimdalsourceforky7.8.git20221115.a6cf945+dfsg-1not yet assignedNot reported[1024187]
Debianheimdalsourcetrixie7.8.git20221115.a6cf945+dfsg-1not yet assignedNot reported[1024187]
Debianheimdalsourcebookworm7.8.git20221115.a6cf945+dfsg-1not yet assignedNot reported[1024187]
Ubuntusambadebpro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1Not reportedUSN-7582-1Not reported
Ubuntusambadeb20.042:4.15.13+dfsg-0ubuntu0.20.04.1Not reportedUSN-5936-1Not reported
Ubuntuheimdaldebpro1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3Not reportedUBUNTU-CVE-2022-3437Not reported
Ubuntusambadebpro2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1Not reportedUBUNTU-CVE-2022-3437Not reported
Ubuntuheimdaldeb18.047.5.0+dfsg-1ubuntu0.3Not reportedUBUNTU-CVE-2022-3437Not reported
Ubuntuheimdaldeb20.047.7.0+dfsg-1ubuntu1.3Not reportedUBUNTU-CVE-2022-3437Not reported
Ubuntusambadeb20.042:4.15.13+dfsg-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2022-3437Not reported
Ubuntusambadeb22.042:4.15.13+dfsg-0ubuntu1Not reportedUBUNTU-CVE-2022-3437Not reported
Opensusesambarpmtumbleweed4.17.2+git.273.a55a83528b9-1.1Not reportedOPENSUSE-SU-2024:12454-1Not reported

[Debian bug #1024187]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [ctdb]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [ctdb-pcp-pmda]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [ldb-tools]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [libldb2]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [libldb2-32bit]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [libldb-devel]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [python3-ldb]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [samba-ad-dc]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [samba-ceph]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [samba-client]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · noarch · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [samba-dcerpc]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • [samba-devel]Unknown

    Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

  • Source package: [samba]

    Details (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 4.17.2+git.273.a55a83528b9-1.1

      Version impact unknown

      dsa · samba · opensuse · tumbleweed

Next results

Observed:

References