Every CVE Search/ Get API key

CVE-2022-0336

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to...

8.8 HighFix available

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.75%Up 0.7 points since Aug 30, 2022
90%50%10%1%

What each source reports

NVD Score used 8.8

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
CVE-2022-0336
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-276
Updated
2026-11-02
CVE List No score

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
CVE-2022-0336
Weakness
CWE-276
Updated
2026-11-02
EUVDEUVD-2022-15499 No score

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
EUVD-2022-15499
Updated
2026-11-03
GitHub AdvisoriesGHSA-rg44-hwh5-vcpq 8.8

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to...

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
GHSA-rg44-hwh5-vcpq
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-276
Updated
2026-11-02
OSVALPINE-CVE-2022-0336 8.8

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
ALPINE-CVE-2022-0336
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-10741 8.8

CVE-2022-0336 affecting package samba 4.12.5-7

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
AZL-10741
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVAZL-37009 8.8

CVE-2022-0336 affecting package samba for versions less than 4.18.3-1

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
AZL-37009
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-0336 8.8

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
DEBIAN-CVE-2022-0336
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVOESA-2022-1529 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

Checks in Samba AD DC to prevent alias SPNs may be bypassed, enabling users who can write to the account's servicePrincipalName attribute to impersonate the service.(CVE-2022-0336)

Record
OESA-2022-1529
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-0336 8.8

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
UBUNTU-CVE-2022-0336
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV No score

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
CVE-2022-0336
Weakness
CWE-276
Updated
2026-11-02
OSVMGASA-2022-0054 No score

Updated samba packages fix security vulnerability

For CVE-2021-20316 and CVE-2021-44141, there is only a workaround and mitigation:

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

Clients that have write access to the exported part of the file system under a share via SMB1 unix extensions or via NFS can create symlinks that point to arbitrary files or directories on the server filesystem.

Clients can then use SMB1 unix extension information queries to determine if the target of the symlink exists or not by examining error codes returned from the smbd server. There is no ability to access these files or directories, only to determine if they exist or not.

If SMB1 is turned off and only SMB2 is used, or unix extensions are not enabled then there is no way to discover if a symlink points to a valid target or not via SMB2. For this reason, even if symlinks are created via NFS, if the Samba server does not allow SMB1 with unix extensions there is no way to exploit this bug.

Finding out what files or directories exist on a file server can help attackers guess system user names or the exact operating system release and applications running on the server hosting Samba which may help mount further attacks.

SMB1 has been disabled on Samba since version 4.11.0 and onwards. Exploitation of this bug has not been seen in the wild.

For CVE-2021-44142, All versions of Samba prior to 4.13.17 are vulnerable to an out-of-bounds heap read write vulnerability that allows remote attackers to execute arbitrary code as root on affected Samba installations that use the VFS module vfs_fruit.

The specific flaw exists within the parsing of EA metadata when opening files in smbd. Access as a user that has write access to a file's extended attributes is required to exploit this vulnerability. Note that this could be a guest or unauthenticated user if such users are allowed write access to file extended attributes.

The problem in vfs_fruit exists in the default configuration of the fruit VFS module using fruit:metadata=netatalk or fruit:resource=file. If both options are set to different settings than the default values, the system is not affected by the security issue.

For CVE-2022-0336, The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain.

An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

Record
MGASA-2022-0054
Updated
2026-11-02
OSVopenSUSE-SU-2022:0283-1 No score

Security update for samba

  • CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690);
  • CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859);
  • CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);

samba was updated to 4.15.4 (jsc#SLE-23329);

  • Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928);
  • Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932);
  • kill_tcp_connections does not work; (bso#14934);
  • Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935);
  • smbclient -L doesn't set 'client max protocol' to NT1 before calling the 'Reconnecting with SMB1 for workgroup listing' path; (bso#14939);
  • Cross device copy of the crossrename module always fails; (bso#14940);
  • symlinkat function from VFS cap module always fails with an error; (bso#14941);
  • Fix possible fsp pointer deference; (bso#14942);
  • Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944);
  • 'smbd --build-options' no longer works without an smb.conf file; (bso#14945);

Samba was updated to version 4.15.3

  • CVE-2021-43566: Symlink race error can allow directory creation outside of the exported share; (bsc#1139519);
  • CVE-2021-20316: Symlink race error can allow metadata read and modify outside of the exported share; (bsc#1191227);
  • Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel.
  • Rename package samba-core-devel to samba-devel
  • Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba

krb5 was updated to 1.16.3 to 1.19.2

  • Fix a denial of service attack against the KDC encrypted challenge code; (CVE-2021-36222);
  • Fix a memory leak when gss_inquire_cred() is called without a credential handle.

Changes from 1.19.1:

  • Fix a linking issue with Samba.
  • Better support multiple pkinit_identities values by checking whether certificates can be loaded for each value.

Changes from 1.19

Administrator experience

  • When a client keytab is present, the GSSAPI krb5 mech will refresh credentials even if the current credentials were acquired manually.
  • It is now harder to accidentally delete the K/M entry from a KDB. Developer experience
  • gss_acquire_cred_from() now supports the 'password' and 'verify' options, allowing credentials to be acquired via password and verified using a keytab key.
  • When an application accepts a GSS security context, the new GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor both provided matching channel bindings.
  • Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests to identify the desired client principal by certificate.
  • PKINIT certauth modules can now cause the hw-authent flag to be set in issued tickets.
  • The krb5_init_creds_step() API will now issue the same password expiration warnings as krb5_get_init_creds_password(). Protocol evolution
  • Added client and KDC support for Microsoft's Resource-Based Constrained Delegation, which allows cross-realm S4U2Proxy requests. A third-party database module is required for KDC support.
  • kadmin/admin is now the preferred server principal name for kadmin connections, and the host-based form is no longer created by default. The client will still try the host-based form as a…
Record
openSUSE-SU-2022:0283-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11807-1 No score

ctdb-4.15.5+git.328.f1f29505d84-1.1 on GA media

These are all security issues fixed in the ctdb-4.15.5+git.328.f1f29505d84-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11807-1
Updated
2026-11-02
OSVSUSE-SU-2022:0283-1 No score

Security update for samba

  • CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share; (bso#14911); (bsc#1193690);
  • CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution; (bso#14914); (bsc#1194859);
  • CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services; (bso#14950); (bsc#1195048);

samba was updated to 4.15.4 (jsc#SLE-23329);

  • Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928);
  • Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932);
  • kill_tcp_connections does not work; (bso#14934);
  • Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935);
  • smbclient -L doesn't set 'client max protocol' to NT1 before calling the 'Reconnecting with SMB1 for workgroup listing' path; (bso#14939);
  • Cross device copy of the crossrename module always fails; (bso#14940);
  • symlinkat function from VFS cap module always fails with an error; (bso#14941);
  • Fix possible fsp pointer deference; (bso#14942);
  • Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944);
  • 'smbd --build-options' no longer works without an smb.conf file; (bso#14945);

Samba was updated to version 4.15.3

  • CVE-2021-43566: Symlink race error can allow directory creation outside of the exported share; (bsc#1139519);
  • CVE-2021-20316: Symlink race error can allow metadata read and modify outside of the exported share; (bsc#1191227);
  • Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel.
  • Rename package samba-core-devel to samba-devel
  • Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba

krb5 was updated to 1.16.3 to 1.19.2

  • Fix a denial of service attack against the KDC encrypted challenge code; (CVE-2021-36222);
  • Fix a memory leak when gss_inquire_cred() is called without a credential handle.

Changes from 1.19.1:

  • Fix a linking issue with Samba.
  • Better support multiple pkinit_identities values by checking whether certificates can be loaded for each value.

Changes from 1.19

Administrator experience

  • When a client keytab is present, the GSSAPI krb5 mech will refresh credentials even if the current credentials were acquired manually.
  • It is now harder to accidentally delete the K/M entry from a KDB. Developer experience
  • gss_acquire_cred_from() now supports the 'password' and 'verify' options, allowing credentials to be acquired via password and verified using a keytab key.
  • When an application accepts a GSS security context, the new GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor both provided matching channel bindings.
  • Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests to identify the desired client principal by certificate.
  • PKINIT certauth modules can now cause the hw-authent flag to be set in issued tickets.
  • The krb5_init_creds_step() API will now issue the same password expiration warnings as krb5_get_init_creds_password(). Protocol evolution
  • Added client and KDC support for Microsoft's Resource-Based Constrained Delegation, which allows cross-realm S4U2Proxy requests. A third-party database module is required for KDC support.
  • kadmin/admin is now the preferred server principal name for kadmin connections, and the host-based form is no longer created by default. The client will still try the host-based form as a…
Record
SUSE-SU-2022:0283-1
Updated
2026-11-02
OSVSUSE-SU-2022:0323-1 No score

Security update for samba

This update contains a major security update for Samba.

samba has received security fixes:

  • CVE-2021-44141: Information leak via symlinks of existance of files or directories outside of the exported share (bsc#1193690);
  • CVE-2021-44142: Out-of-bounds heap read/write vulnerability in VFS module vfs_fruit allows code execution (bsc#1194859);
  • CVE-2022-0336: Samba AD users with permission to write to an account can impersonate arbitrary services (bsc#1195048);

samba was updated to version 4.15.4; (jsc#SLE-23330);

  • CVE-2021-43566: Symlink race error can allow directory creation outside of the exported share; (bso#13979); (bsc#1139519);
  • CVE-2021-20316: Symlink race error can allow metadata read and modify outside of the exported share; (bso#14842); (bsc#1191227);

  • Build samba with embedded talloc, pytalloc, pytalloc-util, tdb, pytdb, tevent, pytevent, ldb, pyldb and pyldb-util libraries. The tdb and ldb tools are installed in /usr/lib[64]/samba/bin and their manpages in /usr/lib[64]/samba/man

    This avoids removing old functionality.

samba was updated to 4.15.4:

  • Duplicate SMB file_ids leading to Windows client cache poisoning; (bso#14928);
  • Failed to parse NTLMv2_RESPONSE length 95 - Buffer Size Error - NT_STATUS_BUFFER_TOO_SMALL; (bso#14932);
  • kill_tcp_connections does not work; (bso#14934);
  • Can't connect to Windows shares not requiring authentication using KDE/Gnome; (bso#14935);
  • smbclient -L doesn't set 'client max protocol' to NT1 before calling the 'Reconnecting with SMB1 for workgroup listing' path; (bso#14939);
  • Cross device copy of the crossrename module always fails; (bso#14940);
  • symlinkat function from VFS cap module always fails with an error; (bso#14941);
  • Fix possible fsp pointer deference; (bso#14942);
  • Missing pop_sec_ctx() in error path inside close_directory(); (bso#14944);
  • 'smbd --build-options' no longer works without an smb.conf file; (bso#14945);
  • Reorganize libs packages. Split samba-libs into samba-client-libs, samba-libs, samba-winbind-libs and samba-ad-dc-libs, merging samba public libraries depending on internal samba libraries into these packages as there were dependency problems everytime one of these public libraries changed its version (bsc#1192684). The devel packages are merged into samba-devel.
  • Rename package samba-core-devel to samba-devel
  • Update the symlink create by samba-dsdb-modules to private samba ldb modules following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba

sssd was updated:

  • Build with the newer samba versions; (jsc#SLE-23330);
  • Fix a dependency loop by moving internal libraries to sssd-common package; (bsc#1182058);

p11-kit was updated:

Update to 0.23.2; (jsc#SLE-23330);

  • Fix forking issues with libffi
  • Fix various crashes in corner cases
  • Updated translations
  • Build fixes
  • Fix multiple integer overflows in rpc code (bsc#1180064 CVE-2020-29361):
  • Add support for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER (bsc#1187993)

ca-certificates was updated:

  • p11-kit 0.23.1 supports pem-directory-hash. (jsc#SLE-23330)

This update also ships:

  • libnettle 3.1 and gnutls 3.4.17 as parallel libraries to meet the requires of the newer samba.

apparmor was updated:

  • Update samba apparmor profiles for samba 4.15 (jsc#SLE-23330);

yast2-samba-client was updated:

  • With latest versions of samba (>=4.15.0) calling 'net ads lookup' with '-U%' fails; (boo#1193533).
  • yast-samba-client fails to join if /etc/samba/smb.conf or /etc/krb5.conf don't exist; (bsc#1089938)
  • Do not stop nmbd while nmbstatus is running, it is not necessary anymore; (bsc#1158916);
Record
SUSE-SU-2022:0323-1
Updated
2026-11-02
OSVUSN-5260-1 No score

samba vulnerabilities

Orange Tsai discovered that the Samba vfs_fruit module incorrectly handled certain memory operations. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly execute arbitrary code as root. (CVE-2021-44142)

Michael Hanselmann discovered that Samba incorrectly created directories. In certain configurations, a remote attacker could possibly create a directory on the server outside of the shared directory. (CVE-2021-43566)

Kees van Vloten discovered that Samba incorrectly handled certain aliased SPN checks. A remote attacker could possibly use this issue to impersonate services. (CVE-2022-0336)

Record
USN-5260-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Alpine:v3.15
 4.0.0 up to 4.15.12-r0
4.15.12-r0
samba
Alpine:v3.16
 4.0.0 up to 4.15.12-r0
4.15.12-r0
samba
Azure Linux:2
 through 4.12.5-7 None known
samba
Azure Linux:3
 before 4.18.3-1
4.18.3-1
samba
Debian:12
 before 2:4.16.0+dfsg-2
2:4.16.0+dfsg-2
samba
Debian:13
 before 2:4.16.0+dfsg-2
2:4.16.0+dfsg-2
samba
Debian:14
 before 2:4.16.0+dfsg-2
2:4.16.0+dfsg-2
samba
Mageia:8
From an advisory covering 4 CVEs
 before 4.14.12-1.mga8
4.14.12-1.mga8
samba
openEuler:20.03-LTS-SP1
 before 4.11.12-11.oe1
4.11.12-11.oe1
samba
openEuler:20.03-LTS-SP2
 before 4.11.12-11.oe1
4.11.12-11.oe1
Show 60 moreShow less
Affected packages
PackageAffectedFixed
samba
openEuler:20.03-LTS-SP3
 before 4.11.12-10.oe1
4.11.12-10.oe1
apparmor
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 2.13.6-150300.3.11.2
2.13.6-150300.3.11.2
krb5
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 1.19.2-150300.8.3.2
1.19.2-150300.8.3.2
ldb
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 2.4.1-150300.3.10.1
2.4.1-150300.3.10.1
libapparmor
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 2.13.6-150300.3.11.1
2.13.6-150300.3.11.1
samba
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 4.15.4+git.324.8332acf1a63-150300.3.25.3
4.15.4+git.324.8332acf1a63-150300.3.25.3
sssd
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 1.16.1-150300.23.17.3
1.16.1-150300.23.17.3
talloc
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 2.3.3-150300.3.3.2
2.3.3-150300.3.3.2
talloc-man
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 2.3.3-150300.3.3.1
2.3.3-150300.3.3.1
tdb
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 1.4.4-150300.3.3.2
1.4.4-150300.3.3.2
tevent
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 0.11.0-150300.3.3.2
0.11.0-150300.3.3.2
tevent-man
SUSE:Linux Enterprise Module for Basesystem 15 SP3
From an advisory covering 8 CVEs
 before 0.11.0-150300.3.3.1
0.11.0-150300.3.3.1
samba
SUSE:Linux Enterprise Module for Python 2 15 SP3
From an advisory covering 8 CVEs
 before 4.15.4+git.324.8332acf1a63-150300.3.25.3
4.15.4+git.324.8332acf1a63-150300.3.25.3
apparmor
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 8 CVEs
 before 2.13.6-150300.3.11.2
2.13.6-150300.3.11.2
krb5
SUSE:Linux Enterprise Module for Server Applications 15 SP3
From an advisory covering 8 CVEs
 before 1.19.2-150300.8.3.2
1.19.2-150300.8.3.2
samba
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 8 CVEs
 before 4.15.4+git.324.8332acf1a63-150300.3.25.3
4.15.4+git.324.8332acf1a63-150300.3.25.3
apparmor
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 8 CVEs
 before 2.13.6-150300.3.11.2
2.13.6-150300.3.11.2
krb5
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 8 CVEs
 before 1.19.2-150300.8.3.2
1.19.2-150300.8.3.2
ldb
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 8 CVEs
 before 2.4.1-150300.3.10.1
2.4.1-150300.3.10.1
libapparmor
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 8 CVEs
 before 2.13.6-150300.3.11.1
2.13.6-150300.3.11.1
sssd
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 8 CVEs
 before 1.16.1-150300.23.17.3
1.16.1-150300.23.17.3
talloc
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 8 CVEs
 before 2.3.3-150300.3.3.2
2.3.3-150300.3.3.2
tdb
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 8 CVEs
 before 1.4.4-150300.3.3.2
1.4.4-150300.3.3.2
tevent
SUSE:Linux Enterprise Micro 5.1
From an advisory covering 8 CVEs
 before 0.11.0-150300.3.3.2
0.11.0-150300.3.3.2
samba
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 7 CVEs
 before 4.15.4+git.324.8332acf1a63-3.54.1
4.15.4+git.324.8332acf1a63-3.54.1
apparmor
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 7 CVEs
 before 2.8.2-56.6.3
2.8.2-56.6.3
p11-kit
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 7 CVEs
 before 0.23.2-8.3.2
0.23.2-8.3.2
samba
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 7 CVEs
 before 4.15.4+git.324.8332acf1a63-3.54.1
4.15.4+git.324.8332acf1a63-3.54.1
sssd
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 7 CVEs
 before 1.16.1-7.28.9
1.16.1-7.28.9
apparmor
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 2.8.2-56.6.3
2.8.2-56.6.3
ca-certificates
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 1_201403302107-15.3.3
1_201403302107-15.3.3
gnutls
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 3.4.17-8.4.1
3.4.17-8.4.1
libnettle
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 3.1-21.3.2
3.1-21.3.2
p11-kit
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 0.23.2-8.3.2
0.23.2-8.3.2
samba
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 4.15.4+git.324.8332acf1a63-3.54.1
4.15.4+git.324.8332acf1a63-3.54.1
sssd
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 1.16.1-7.28.9
1.16.1-7.28.9
yast2-samba-client
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 7 CVEs
 before 3.1.23-3.3.1
3.1.23-3.3.1
apparmor
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 2.8.2-56.6.3
2.8.2-56.6.3
ca-certificates
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 1_201403302107-15.3.3
1_201403302107-15.3.3
gnutls
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 3.4.17-8.4.1
3.4.17-8.4.1
libnettle
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 3.1-21.3.2
3.1-21.3.2
p11-kit
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 0.23.2-8.3.2
0.23.2-8.3.2
samba
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 4.15.4+git.324.8332acf1a63-3.54.1
4.15.4+git.324.8332acf1a63-3.54.1
sssd
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 1.16.1-7.28.9
1.16.1-7.28.9
yast2-samba-client
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 7 CVEs
 before 3.1.23-3.3.1
3.1.23-3.3.1
samba
Ubuntu:20.04:LTS
 before 2:4.13.17~dfsg-0ubuntu0.21.04.1, plus listed versions
2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4
Show 16 moreShow less
2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.4
2:4.13.17~dfsg-0ubuntu0.21.04.1
samba
Ubuntu:20.04:LTS
From an advisory covering 3 CVEs
 before 2:4.13.17~dfsg-0ubuntu0.21.04.1, plus listed versions
2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4
Show 16 moreShow less
2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.4
2:4.13.17~dfsg-0ubuntu0.21.04.1
apparmor
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 2.13.6-150300.3.11.2
2.13.6-150300.3.11.2
krb5
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 1.19.2-150300.8.3.2
1.19.2-150300.8.3.2
krb5-mini
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 1.19.2-150300.8.3.2
1.19.2-150300.8.3.2
ldb
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 2.4.1-150300.3.10.1
2.4.1-150300.3.10.1
libapparmor
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 2.13.6-150300.3.11.1
2.13.6-150300.3.11.1
samba
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 4.15.4+git.324.8332acf1a63-150300.3.25.3
4.15.4+git.324.8332acf1a63-150300.3.25.3
sssd
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 1.16.1-150300.23.17.3
1.16.1-150300.23.17.3
talloc
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 2.3.3-150300.3.3.2
2.3.3-150300.3.3.2
talloc-man
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 2.3.3-150300.3.3.1
2.3.3-150300.3.3.1
tdb
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 1.4.4-150300.3.3.2
1.4.4-150300.3.3.2
tevent
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 0.11.0-150300.3.3.2
0.11.0-150300.3.3.2
tevent-man
openSUSE:Leap 15.3
From an advisory covering 8 CVEs
 before 0.11.0-150300.3.3.1
0.11.0-150300.3.3.1
samba
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 4.15.5+git.328.f1f29505d84-1.1
4.15.5+git.328.f1f29505d84-1.1

History

History
RecordedChangedSources
affected, factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-0336 is a high vulnerability (CVSS 8.8) in Samba, published January 31, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 78th percentile. Fixed in samba 4.15.12-r0.

References

Show 48 moreShow less
This page doesn't list everything

Left out here: the rest of 2 source descriptions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open