{"id":"CVE-2022-32746","aliases":["ALPINE-CVE-2022-32746","ALSA-2022:7730","ALSA-2022:8318","AZL-10707","AZL-37015","AZL-45138","DEBIAN-CVE-2022-32746","DSA-5205-1","EUVD-2022-35812","GHSA-hv8p-prvv-v646","MGASA-2022-0299","OESA-2022-1798","OESA-2022-1806","OESA-2022-1816","OESA-2022-1817","RHSA-2022:7730","RHSA-2022:8318","RLSA-2022:7730","RLSA-2022:8318","SUSE-SU-2022:2582-1","SUSE-SU-2022:2586-1","SUSE-SU-2022:2586-2","SUSE-SU-2022:2659-1","SUSE-SU-2022:4395-1","SUSE-SU-2023:0081-1","SUSE-SU-2023:0160-1","SUSE-SU-2023:1687-1","SUSE-SU-2023:1689-1","UBUNTU-CVE-2022-32746","USN-5542-1","openSUSE-SU-2024:12241-1","openSUSE-SU-2024:12243-1"],"status":"published","title":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access...","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01318,"percentile":0.71029,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2022-07-27T00:00:00Z","modified":"2026-11-03T08:04:08Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"samba","fixed_in":["4.14.14-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"samba","fixed_in":["4.15.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"samba","fixed_in":["4.15.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"samba","fixed_in":["4.15.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"samba","fixed_in":["4.15.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"samba","fixed_in":["4.15.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"samba","fixed_in":["4.15.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"samba","fixed_in":["4.15.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"samba","fixed_in":["4.15.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"samba","fixed_in":["4.15.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"samba","fixed_in":["4.15.9-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"ldb-tools","fixed_in":["2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libldb","fixed_in":["2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"libldb-devel","fixed_in":["2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python-ldb-devel-common","fixed_in":["2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-ldb","fixed_in":["2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"python3-ldb-devel","fixed_in":["2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"ldb-tools","fixed_in":["2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libldb","fixed_in":["2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"libldb-devel","fixed_in":["2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"python3-ldb","fixed_in":["2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"samba","fixed_in":["4.18.3-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"libldb","fixed_in":["2.7.2-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.16.4+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.16.4+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.16.4+dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"libldb","fixed_in":["2.0.12-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"libldb","fixed_in":["2.0.12-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"libldb","fixed_in":["2.4.1-2.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ldb-tools","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ldb-tools-debuginfo","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libldb","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libldb-debuginfo","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libldb-debugsource","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libldb-devel","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-ldb","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-ldb-debuginfo","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ldb-tools-debuginfo","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libldb-debuginfo","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libldb-debugsource","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python-ldb-devel-common","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-ldb-debuginfo","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-ldb-devel","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ldb-tools","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ldb-tools-debuginfo","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libldb","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libldb-debuginfo","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libldb-debugsource","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-ldb","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-ldb-debuginfo","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ldb-tools-debuginfo","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libldb-debuginfo","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libldb-debugsource","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libldb-devel","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3-ldb-debuginfo","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"libldb","fixed_in":["0:2.5.2-2.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"libldb","fixed_in":["0:2.5.2-1.el9"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"ldb","fixed_in":["2:2.2.3-0ubuntu0.20.04.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"samba","fixed_in":["2:4.13.17~dfsg-0ubuntu1.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"ldb","fixed_in":["2:2.4.4-0ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"samba","fixed_in":["2:4.15.9+dfsg-0ubuntu0.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ldb","fixed_in":["2.5.2-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.14.14-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0"},{"fixed":"4.15.9-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"ldb-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libldb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python-ldb-devel-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-ldb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"ldb-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"libldb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.3-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.2-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.16.4+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.16.4+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.16.4+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.13+dfsg-1~deb11u5"}]}],"versions":["2:4.13.13+dfsg-1~deb11u1","2:4.13.13+dfsg-1~deb11u2","2:4.13.13+dfsg-1~deb11u3","2:4.13.13+dfsg-1~deb11u4","2:4.13.5+dfsg-2"],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.14-1.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1.4.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.3-7.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.12-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.12-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-2.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-13.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-12.oe1"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ldb-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"ldb-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libldb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libldb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"libldb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-ldb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"ldb-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libldb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"libldb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python-ldb-devel-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-ldb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-ldb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ldb-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"ldb-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libldb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"libldb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"python3-ldb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"ldb-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libldb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libldb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"libldb-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"python3-ldb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-2.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"libldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2-1.el9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.462.e73f4310487-3.68.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.462.e73f4310487-3.68.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.462.e73f4310487-3.68.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.462.e73f4310487-3.68.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150300.3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150300.3.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150300.3.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150300.3.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150300.3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150300.3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150300.3.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150300.3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150300.3.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150300.3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150300.3.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150300.3.20.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150300.3.37.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150400.4.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150400.3.11.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150400.3.11.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150400.4.8.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.8+git.500.d5910280cc7-150400.3.11.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.482.1ac2c665c7-3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.482.1ac2c665c7-3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.482.1ac2c665c7-3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.482.1ac2c665c7-3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150300.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150300.3.52.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150400.4.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150400.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150400.4.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150400.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150400.4.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150400.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150400.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150400.4.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150400.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-150400.4.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.636.53d93c5b9d6-150400.3.23.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.1.15-1.1","1:1.1.16-1","1:1.1.16-1ubuntu0.1","1:1.1.24-0ubuntu0.14.04.1","1:1.1.24-0ubuntu0.14.04.2","1:1.1.24-0ubuntu0.14.04.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.1.20-2","2:1.1.21-1","2:1.1.23-1","2:1.1.23-1ubuntu1","2:1.1.24-1ubuntu1","2:1.1.24-1ubuntu3","2:1.1.24-1ubuntu3.1","2:1.1.24-1ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:1.1.29-2","2:1.2.2-2","2:1.2.3-1","2:1.2.3-1ubuntu0.1","2:1.2.3-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.2.3-0ubuntu0.20.04.3"}]}],"versions":["2:1.5.5-0ubuntu2","2:1.5.5-0ubuntu3","2:2.0.7-4","2:2.0.8-1ubuntu1","2:2.0.8-2","2:2.0.10-0ubuntu0.20.04.1","2:2.0.10-0ubuntu0.20.04.2","2:2.0.10-0ubuntu0.20.04.3","2:2.2.3-0ubuntu0.20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.17~dfsg-0ubuntu1.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.4.4-0ubuntu0.1"}]}],"versions":["2:2.2.0-3.1","2:2.2.3-2","2:2.4.2-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.9+dfsg-0ubuntu0.2"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.17~dfsg-0ubuntu1.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.9+dfsg-0ubuntu0.2"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.4+git.297.1497eb221ed-1.1"}]}],"bundled":5}],"products":[{"vendor":"samba","product":"samba"}],"references":[{"url":"https://www.samba.org/samba/security/CVE-2022-32746.html","tags":["x_transferred","Patch","Vendor Advisory","web","advisory","article","report"]},{"url":"https://security.gentoo.org/glsa/202309-06","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32746","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-hv8p-prvv-v646"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-32746","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7730","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32746","tags":["report"]},{"url":"https://bugzilla.redhat.com/2108215","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7730.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8318","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8318.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32746.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-32746","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0299.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30675","tags":["report"]},{"url":"https://www.samba.org/samba/security/CVE-2022-2031.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-32742.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-32744.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-32745.html","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CKTUJ63ZYTQNYFNRWGXIE3KBEFGJXGJL/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-5542-1","tags":["advisory"]},{"url":"https://www.debian.org/security/2022/dsa-5205","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2RORIRLFLRNQOCVXQU4V3RLZ5C2G75L2/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1798","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32742","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32744","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2031","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1806","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1816","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1817","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077484","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108998","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7730.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32746","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077490","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8318.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7730","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8318","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222582-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1198255","tags":["report"]},{"url":"https://bugzilla.suse.com/1199247","tags":["report"]},{"url":"https://bugzilla.suse.com/1199734","tags":["report"]},{"url":"https://bugzilla.suse.com/1200556","tags":["report"]},{"url":"https://bugzilla.suse.com/1200964","tags":["report"]},{"url":"https://bugzilla.suse.com/1201490","tags":["report"]},{"url":"https://bugzilla.suse.com/1201492","tags":["report"]},{"url":"https://bugzilla.suse.com/1201493","tags":["report"]},{"url":"https://bugzilla.suse.com/1201495","tags":["report"]},{"url":"https://bugzilla.suse.com/1201496","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32746","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222586-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196224","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222586-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222659-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224395-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200102","tags":["report"]},{"url":"https://bugzilla.suse.com/1201689","tags":["report"]},{"url":"https://bugzilla.suse.com/1204254","tags":["report"]},{"url":"https://bugzilla.suse.com/1205126","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42898","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230081-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206504","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38023","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230160-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205385","tags":["report"]},{"url":"https://bugzilla.suse.com/1205386","tags":["report"]},{"url":"https://bugzilla.suse.com/1206546","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37967","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231687-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207416","tags":["report"]},{"url":"https://bugzilla.suse.com/1209481","tags":["report"]},{"url":"https://bugzilla.suse.com/1209483","tags":["report"]},{"url":"https://bugzilla.suse.com/1209485","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0922","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20231689-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1207723","tags":["report"]},{"url":"https://bugzilla.suse.com/1207996","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32746","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3670","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2031","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32742","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32744","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-32745","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-32746","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-25T00:00:00Z","modified":"2024-08-03T07:46:45.265Z","cwes":["CWE-416"],"updated_at":"2026-11-02T14:34:36.578327Z"}],"euvd":[{"id":"EUVD-2022-35812","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-25T00:00:00Z","modified":"2024-08-03T07:46:45Z","updated_at":"2026-11-03T03:25:31.522014Z"}],"ghsa":[{"id":"GHSA-hv8p-prvv-v646","title":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access...","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-26T00:03:31Z","modified":"2023-09-17T09:30:18Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:54:46.481792Z"}],"nvd":[{"id":"CVE-2022-32746","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-25T18:15:10.633Z","modified":"2026-06-17T04:47:50.75Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"primary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:07:25.883929Z"}],"osv":[{"id":"ALPINE-CVE-2022-32746","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-25T18:15:10.633Z","modified":"2026-11-03T07:18:33.452385227Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-10707","title":"CVE-2022-32746 affecting package samba 4.12.5-7","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-25T18:15:10Z","modified":"2026-04-21T04:21:25.403526Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:01.408755Z"},{"id":"AZL-37015","title":"CVE-2022-32746 affecting package samba for versions less than 4.18.3-1","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-25T18:15:10Z","modified":"2026-04-21T04:55:50.517326Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"AZL-45138","title":"CVE-2022-32746 affecting package libldb for versions less than 2.7.2-1","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-25T18:15:10Z","modified":"2026-04-21T04:49:23.26193Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:05.694722Z"},{"id":"DEBIAN-CVE-2022-32746","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-25T18:15:10.633Z","modified":"2026-11-03T08:04:08.034549539Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T08:23:07.763774Z"},{"id":"OESA-2022-1798","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es): \r\n\r\nA flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.(CVE-2022-32745)\n\nA flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.(CVE-2022-32746)\n\nA flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).(CVE-2022-32742)\n\nA flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users passwords, enabling full domain takeover.(CVE-2022-32744)\n\nAs per samba upstream advisory:All versions of Samba prior to 4.16.x built with Heimdal Kerberos are vulnerable to an Elevation of Privilege attack. If the password of a user expires and need to be changed, a user could get a krbtgt using kpasswd with canonicalization turned on. The KDC should only provide a ticket for kadmin/changepw but returns a krbtgt. So a user could skip the password change and just use the krbtgt to get service tickets and use services in the forest.(CVE-2022-2031)","status":"published","published":"2022-08-05T11:05:04Z","modified":"2026-08-18T01:17:10.232315212Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1806","title":"libldb security update","description":"An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.(CVE-2022-32746)","status":"published","published":"2022-08-05T11:05:04Z","modified":"2026-08-18T01:16:54.041193426Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1816","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es): \r\n\nA flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.(CVE-2022-32746)\n\nA flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).(CVE-2022-32742)\n\nA flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users passwords, enabling full domain takeover.(CVE-2022-32744)\n\nAs per samba upstream advisory:All versions of Samba prior to 4.16.x built with Heimdal Kerberos are vulnerable to an Elevation of Privilege attack. If the password of a user expires and need to be changed, a user could get a krbtgt using kpasswd with canonicalization turned on. The KDC should only provide a ticket for kadmin/changepw but returns a krbtgt. So a user could skip the password change and just use the krbtgt to get service tickets and use services in the forest.(CVE-2022-2031)","status":"published","published":"2022-08-11T11:05:05Z","modified":"2026-08-18T01:17:10.597743868Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"OESA-2022-1817","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es): \r\n\nA flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.(CVE-2022-32746)\n\nA flaw was found in Samba. Some SMB1 write requests were not correctly range-checked to ensure the client had sent enough data to fulfill the write, allowing server memory contents to be written into the file (or printer) instead of client-supplied data. The client cannot control the area of the server memory written to the file (or printer).(CVE-2022-32742)\n\nA flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users passwords, enabling full domain takeover.(CVE-2022-32744)\n\nAs per samba upstream advisory:All versions of Samba prior to 4.16.x built with Heimdal Kerberos are vulnerable to an Elevation of Privilege attack. If the password of a user expires and need to be changed, a user could get a krbtgt using kpasswd with canonicalization turned on. The KDC should only provide a ticket for kadmin/changepw but returns a krbtgt. So a user could skip the password change and just use the krbtgt to get service tickets and use services in the forest.(CVE-2022-2031)","status":"published","published":"2022-08-11T11:05:05Z","modified":"2026-08-18T01:16:23.663490568Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7730","title":"Red Hat Security Advisory: libldb security, bug fix, and enhancement update","status":"published","published":"2024-09-18T05:55:18Z","modified":"2026-06-26T12:22:18.624704476Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8318","title":"Red Hat Security Advisory: libldb security, bug fix, and enhancement update","status":"published","published":"2024-09-18T05:55:36Z","modified":"2026-06-26T12:22:29.930180057Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7730","title":"Moderate: libldb security, bug fix, and enhancement update","description":"The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.\n\nThe following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077484)\n\nSecurity Fix(es):\n\n* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:27:20Z","modified":"2026-02-05T07:00:11.054248Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8318","title":"Moderate: libldb security, bug fix, and enhancement update","description":"The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.\n\nThe following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077490)\n\nSecurity Fix(es):\n\n* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:21:32Z","modified":"2026-02-04T14:45:04.063374Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-32746","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-07-27T00:00:00Z","modified":"2026-04-22T13:23:30.71729Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"ALSA-2022:7730","title":"Moderate: libldb security, bug fix, and enhancement update","description":"The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.\n\nThe following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077484)\n\nSecurity Fix(es):\n\n* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:51.862844083Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8318","title":"Moderate: libldb security, bug fix, and enhancement update","description":"The libldb packages provide an extensible library that implements an LDAP-like API to access remote LDAP servers, or use local TDB databases.\n\nThe following packages have been upgraded to a later upstream version: libldb (2.5.2). (BZ#2077490)\n\nSecurity Fix(es):\n\n* samba: AD users can induce a use-after-free in the server process with an LDAP add or modify request (CVE-2022-32746)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:19.93547036Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CVE-2022-32746","description":"A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.","status":"published","published":"2022-08-25T00:00:00Z","modified":"2026-10-28T02:30:45.777969851Z","cwes":["CWE-416"],"updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"DSA-5205-1","title":"samba - security update","status":"published","published":"2022-08-11T00:00:00Z","modified":"2026-03-09T02:09:57.941014Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"MGASA-2022-0299","title":"Updated ldb/samba/sssd packages fix security vulnerability","description":"Fixed AD restrictions bypass associated with changing passwords\n(bsc#1201495). (CVE-2022-2031)\nFixed a memory leak in SMB1 (bsc#1201496). (CVE-2022-32742)\nFixed an arbitrary password change request for any AD  user (bsc#1201493).\n(CVE-2022-32744)\nFixed a remote server crash with an LDAP add or modify request\n(bsc#1201492) (CVE-2022-32745)\nFixed a use-after-free occurring in database audit logging (bsc#1201490).\n(CVE-2022-32746)\n","status":"published","published":"2022-08-25T21:21:07Z","modified":"2026-04-16T04:41:57.566011236Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12241-1","title":"ldb-tools-2.5.2-1.1 on GA media","description":"These are all security issues fixed in the ldb-tools-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:27:13.464102Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:12243-1","title":"ctdb-4.16.4+git.297.1497eb221ed-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.16.4+git.297.1497eb221ed-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:16.931104Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:2582-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490).\n- CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492).\n- CVE-2022-2031: Fixed AD restrictions bypass associated with changing passwords (bsc#1201495).\n- CVE-2022-32742: Fixed a memory leak in SMB1 (bsc#1201496).\n- CVE-2022-32744: Fixed an arbitrary password change request for any AD user (bsc#1201493).\n\nThe following non-security bugs were fixed:\n\n- netgroups support removed; (bso#15087); (bsc#1199247).\n- net ads info shows LDAP Server: 0.0.0.0 depending on contacted server; (bso#14674); (bsc#1199734).\n- smbclient commands del and deltree fail with\n    NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);\n    (bsc#1200556).\n- move pdb backends from package samba-libs to package\n  samba-client-libs and remove samba-libs requirement from\n  samba-winbind; (bsc#1200964); (bsc#1198255);\n","status":"published","published":"2022-07-29T08:25:33Z","modified":"2026-02-04T04:36:25.48122Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2586-1","title":"Security update for ldb, samba","description":"This update for ldb, samba fixes the following issues:\n\n- CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490).\n- CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492).\n- CVE-2022-2031: Fixed AD restrictions bypass associated with changing passwords (bsc#1201495).\n- CVE-2022-32742: Fixed a memory leak in SMB1 (bsc#1201496).\n- CVE-2022-32744: Fixed an arbitrary password change request for any AD user (bsc#1201493).\n\nThe following security bugs were fixed:\n\nsamba was updated to 4.15.8:\n\n* Use pathref fd instead of io fd in vfs_default_durable_cookie;\n  (bso#15042);\n* Setting fruit:resource = stream in vfs_fruit causes a panic;\n  (bso#15099);\n* Add support for bind 9.18; (bso#14986);\n* logging dsdb audit to specific files does not work; (bso#15076);\n* vfs_gpfs with vfs_shadowcopy2 fail to restore file if original\n  file had been deleted; (bso#15069);\n* netgroups support removed; (bso#15087); (bsc#1199247);\n* net ads info shows LDAP Server: 0.0.0.0 depending on contacted\n  server; (bso#14674); (bsc#1199734);\n* waf produces incorrect names for python extensions with Python\n  3.11; (bso#15071);\n* smbclient commands del \u0026 deltree fail with\n  NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);\n  (bsc#1200556);\n* vfs_gpfs recalls=no option prevents listing files; (bso#15055);\n* waf produces incorrect names for python extensions with Python\n  3.11; (bso#15071);\n* Compile error in source3/utils/regedit_hexedit.c; (bso#15091);\n* ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;\n  (bso#15108);\n* smbd doesn't handle UPNs for looking up names; (bso#15054);\n* Out-by-4 error in smbd read reply max_send clamp; (bso#14443);\n\n- Move pdb backends from package samba-libs to package\n  samba-client-libs and remove samba-libs requirement from\n  samba-winbind; (bsc#1200964); (bsc#1198255);\n- Use the canonical realm name to refresh the Kerberos tickets;\n  (bsc#1196224); (bso#14979);\n- Fix  smbclient commands del \u0026 deltree failing with\n  NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);\n  (bsc#1200556).\n\nldb was updated to version 2.4.3\n\n* Fix build problems, waf produces incorrect names for python extensions; (bso#15071);\n","status":"published","published":"2022-07-29T10:01:18Z","modified":"2026-02-04T04:18:36.73657Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2586-2","title":"Security update for ldb, samba","description":"This update for ldb, samba fixes the following issues:\n\n- CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490).\n- CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492).\n- CVE-2022-2031: Fixed AD restrictions bypass associated with changing passwords (bsc#1201495).\n- CVE-2022-32742: Fixed a memory leak in SMB1 (bsc#1201496).\n- CVE-2022-32744: Fixed an arbitrary password change request for any AD user (bsc#1201493).\n\nThe following security bugs were fixed:\n\nsamba was updated to 4.15.8:\n\n* Use pathref fd instead of io fd in vfs_default_durable_cookie;\n  (bso#15042);\n* Setting fruit:resource = stream in vfs_fruit causes a panic;\n  (bso#15099);\n* Add support for bind 9.18; (bso#14986);\n* logging dsdb audit to specific files does not work; (bso#15076);\n* vfs_gpfs with vfs_shadowcopy2 fail to restore file if original\n  file had been deleted; (bso#15069);\n* netgroups support removed; (bso#15087); (bsc#1199247);\n* net ads info shows LDAP Server: 0.0.0.0 depending on contacted\n  server; (bso#14674); (bsc#1199734);\n* waf produces incorrect names for python extensions with Python\n  3.11; (bso#15071);\n* smbclient commands del \u0026 deltree fail with\n  NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);\n  (bsc#1200556);\n* vfs_gpfs recalls=no option prevents listing files; (bso#15055);\n* waf produces incorrect names for python extensions with Python\n  3.11; (bso#15071);\n* Compile error in source3/utils/regedit_hexedit.c; (bso#15091);\n* ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;\n  (bso#15108);\n* smbd doesn't handle UPNs for looking up names; (bso#15054);\n* Out-by-4 error in smbd read reply max_send clamp; (bso#14443);\n\n- Move pdb backends from package samba-libs to package\n  samba-client-libs and remove samba-libs requirement from\n  samba-winbind; (bsc#1200964); (bsc#1198255);\n- Use the canonical realm name to refresh the Kerberos tickets;\n  (bsc#1196224); (bso#14979);\n- Fix  smbclient commands del \u0026 deltree failing with\n  NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);\n  (bsc#1200556).\n\nldb was updated to version 2.4.3\n\n* Fix build problems, waf produces incorrect names for python extensions; (bso#15071);\n","status":"published","published":"2022-07-29T10:01:33Z","modified":"2026-02-04T03:47:10.886032Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2659-1","title":"Security update for ldb, samba","description":"This update for ldb, samba fixes the following issues:\n\n- CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490).\n- CVE-2022-32745: Fixed a remote server crash with an LDAP add or modify request (bsc#1201492).\n- CVE-2022-2031: Fixed AD restrictions bypass associated with changing passwords (bsc#1201495).\n- CVE-2022-32742: Fixed a memory leak in SMB1 (bsc#1201496).\n- CVE-2022-32744: Fixed an arbitrary password change request for any AD user (bsc#1201493).\n\nThe following non-security bug were fixed:\n\nldb was updated to version 2.4.3:\n\n+ Fix build problems, waf produces incorrect names for python\n  extensions; (bso#15071);\n\nsamba was updated to 4.15.8:\n\n* Use pathref fd instead of io fd in vfs_default_durable_cookie;\n  (bso#15042);\n* Setting fruit:resource = stream in vfs_fruit causes a panic;\n  (bso#15099);\n* Add support for bind 9.18; (bso#14986);\n* logging dsdb audit to specific files does not work; (bso#15076);\n* vfs_gpfs with vfs_shadowcopy2 fail to restore file if original\n  file had been deleted; (bso#15069);\n* netgroups support removed; (bso#15087); (bsc#1199247);\n* net ads info shows LDAP Server: 0.0.0.0 depending on contacted\n  server; (bso#14674); (bsc#1199734);\n* waf produces incorrect names for python extensions with Python\n  3.11; (bso#15071);\n* smbclient commands del \u0026 deltree fail with\n  NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);\n  (bsc#1200556);\n* vfs_gpfs recalls=no option prevents listing files; (bso#15055);\n* waf produces incorrect names for python extensions with Python\n  3.11; (bso#15071);\n* Compile error in source3/utils/regedit_hexedit.c; (bso#15091);\n* ldconfig: /lib64/libsmbconf.so.0 is not a symbolic link;\n  (bso#15108);\n* smbd doesn't handle UPNs for looking up names; (bso#15054);\n* Out-by-4 error in smbd read reply max_send clamp; (bso#14443);\n\n- Move pdb backends from package samba-libs to package\n  samba-client-libs and remove samba-libs requirement from\n  samba-winbind; (bsc#1200964); (bsc#1198255);\n- Use the canonical realm name to refresh the Kerberos tickets;\n  (bsc#1196224); (bso#14979);\n- Fix  smbclient commands del \u0026 deltree failing with\n  NT_STATUS_OBJECT_PATH_NOT_FOUND with DFS; (bso#15100);\n  (bsc#1200556).\n","status":"published","published":"2022-08-03T19:05:36Z","modified":"2026-02-04T02:18:59.100838Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:4395-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nVersion update to 4.15.12.\n\nSecurity issues fixed:\n\n- CVE-2022-2031: Fixed AD users that could have bypassed certain restrictions associated with changing passwords (bsc#1201495).\n- CVE-2022-32742: Fixed SMB1 code that does not correctly verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths (bsc#1201496).\n- CVE-2022-32744: Fixed AD users that could have forged password change requests for any user (bsc#1201493).\n- CVE-2022-32745: Fixed AD users that could have crashed the server process with an LDAP add or modify request (bsc#1201492).\n- CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490).\n- CVE-2022-3437: Fixed buffer overflow in Heimdal unwrap_des3() (bsc#1204254).\n- CVE-2022-42898: Fixed Samba buffer overflow vulnerabilities on 32-bit systems (bsc#1205126).\n\nBug fixes:\n\n- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory (bsc#1201689).\n- Possible use after free of connection_struct when iterating smbd_server_connection-\u003econnections (bsc#1200102).\n","status":"published","published":"2022-12-09T10:03:00Z","modified":"2026-02-04T04:16:44.031444Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0081-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- Updated to version 4.15.13:\n  - CVE-2022-38023: Removed weak cryptographic algorithms from the\n    Netlogon RPC implementation (bsc#1206504).\n  - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on\n    32-bit systems (bsc#1205126).\n  - CVE-2022-3437: Fixed a buffer overflow in Heimdal unwrap_des3()\n    (bsc#1204254).\n  - CVE-2022-32742: Fixed an information disclosure issue affecting\n    SMB1 servers (bsc#1201496).\n  - CVE-2022-32746: Fixed a use-after-free occurring in database audit\n    logging (bsc#1201490).\n  - CVE-2022-2031: Fixed an AD restriction bypass associated with\n    changing passwords (bsc#1201495).\n  - CVE-2022-32745: Fixed a remote server crash that could be triggered\n    with certain LDAP requests (bsc#1201492).\n  - CVE-2022-32744: Fixed an issue where AD users could have forged\n    password change requests on behalf of other users (bsc#1201493).\n\nOther fixes:\n  - Fixed a potential crash due to a concurrency issue (bsc#1200102).\n","status":"published","published":"2023-01-12T09:34:10Z","modified":"2026-02-04T03:46:14.602899Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0160-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n\n- Updated to version 4.15.13:\n  - CVE-2022-37966: Fixed an issue where a weak cipher would be\n    selected to encrypt session keys, which could lead to privilege\n    escalation (bsc#1205385).\n  - CVE-2022-37967: Fixed a potential privilege escalation issue via\n    constrained delegation due to weak a cryptographic algorithm\n    being selected (bsc#1205386).\n  - CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n    Secure channel (bsc#1206504).\n\n- Updated to version 4.15.12:\n  - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on\n  32-bit systems (bsc#1205126).\n\n- Updated to version 4.15.11:\n  - CVE-2022-3437: Fixed a buffer overflow in Heimdal unwrap_des3()\n  (bsc#1204254).\n\n- Updated to version 4.15.10:\n  - Fixed a potential crash due to a concurrency issue (bsc#1200102).\n\n- Updated to version 4.15.9:\n  - CVE-2022-32742: Fixed an information leak that could be triggered\n    via SMB1 (bsc#1201496).\n  - CVE-2022-32746: Fixed a memory corruption issue in database\n    audit logging (bsc#1201490).\n  - CVE-2022-2031: Fixed AD restrictions bypass associated with\n    changing passwords (bsc#1201495).\n  - CVE-2022-32745: Fixed a remote server crash that could be\n    triggered with certain LDAP requests (bsc#1201492).\n  - CVE-2022-32744: Fixed an issue where AD users could have forged\n    password change requests on behalf of other users (bsc#1201493).\n\nOther fixes:\n\n- Fixed a problem when using bind as samba-ad-dc backend related to\n  the named service (bsc#1201689).\n","status":"published","published":"2023-01-26T17:22:47Z","modified":"2026-02-04T03:17:36.805483Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:1687-1","title":"Security update for ldb, samba","description":"This update for ldb, samba fixes the following issues:\n\nldb: \n    \n- CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).\n- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).\n\nsamba:\n\n- CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).\n- CVE-2023-0225: Fixed deletion of AD DC 'dnsHostname' attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).\n- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).\n\nThe following non-security bug was fixed:\n\n- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).\n","status":"published","published":"2023-03-29T15:52:38Z","modified":"2025-05-02T04:33:18.691041Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"SUSE-SU-2023:1689-1","title":"Security update for ldb, samba","description":"This update for ldb, samba fixes the following issues:\n\nldb: \n    \n- CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).\n- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).\n\nsamba:\n\n- CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).\n- CVE-2023-0225: Fixed deletion of AD DC 'dnsHostname' attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).\n- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).\n\nThe following non-security bug were fixed:\n\n- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).\n- Ship missing samba-winbind-libs-32bit package (bsc#1207996)\n- Ship missing samba-libs to SLE Micro 5.3 (bsc#1207723)\n","status":"published","published":"2023-03-29T16:34:28Z","modified":"2026-02-04T03:11:21.033282Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-5542-1","title":"samba vulnerabilities","description":"It was discovered that Samba did not handle MaxQueryDuration when being\nused in AD DC configurations, contrary to expectations. This issue only\naffected Ubuntu 20.04 LTS. (CVE-2021-3670)\n\nLuke Howard discovered that Samba incorrectly handled certain restrictions\nassociated with changing passwords. A remote attacker being requested to\nchange passwords could possibly use this issue to escalate privileges.\n(CVE-2022-2031)\n\nLuca Moro discovered that Samba incorrectly handled certain SMB1\ncommunications. A remote attacker could possibly use this issue to obtain\nsensitive memory contents. (CVE-2022-32742)\n\nJoseph Sutton discovered that Samba incorrectly handled certain password\nchange requests. A remote attacker could use this issue to change passwords\nof other users, resulting in privilege escalation. (CVE-2022-32744)\n\nJoseph Sutton discovered that Samba incorrectly handled certain LDAP add or\nmodify requests. A remote attacker could possibly use this issue to cause\nSamba to crash, resulting in a denial of service. (CVE-2022-32745)\n\nJoseph Sutton and Andrew Bartlett discovered that Samba incorrectly handled\ncertain LDAP add or modify requests. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-32746)\n","status":"published","published":"2022-08-01T11:50:53Z","modified":"2026-04-27T16:15:01.584186Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}