{"id":"CVE-2022-3437","aliases":["ALPINE-CVE-2022-3437","AZL-12995","AZL-37016","BELL-CVE-2022-3437","CLSA-2023-1675372486","CLSA-2023-1703011710","DEBIAN-CVE-2022-3437","DLA-3206-1","DLA-3792-1","DSA-5287-1","DSA-5647-1","EUVD-2022-42813","MGASA-2022-0468","MGASA-2023-0010","OESA-2022-2038","SUSE-SU-2022:4395-1","SUSE-SU-2023:0081-1","SUSE-SU-2023:0160-1","UBUNTU-CVE-2022-3437","USN-5800-1","USN-5822-1","USN-5936-1","USN-7582-1","openSUSE-SU-2023:0019-1","openSUSE-SU-2023:0020-1","openSUSE-SU-2024:12454-1","openSUSE-SU-2024:12580-1"],"status":"published","title":"CVE-2022-3437 affecting package samba 4.12.5-7","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03858,"percentile":0.90244,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122"],"published":"2022-10-27T00:00:00Z","modified":"2026-11-03T08:01:31Z","fixes":[{"ecosystem":"Alpine:v3.14","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"heimdal","fixed_in":["7.7.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"samba","fixed_in":["4.15.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"samba","fixed_in":["4.15.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"samba","fixed_in":["4.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"samba","fixed_in":["4.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"samba","fixed_in":["4.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"samba","fixed_in":["4.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"samba","fixed_in":["4.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"samba","fixed_in":["4.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"samba","fixed_in":["4.16.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"samba","fixed_in":["4.16.6-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"samba","fixed_in":["4.18.3-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"ctdb","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss-winbind","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-winbind","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libparse-pidl-perl","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsmbclient","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsmbclient-dev","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libwbclient-dev","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libwbclient0","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python-samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"registry-tools","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-common","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-common-bin","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-dev","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-dsdb-modules","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-libs","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-testsuite","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-vfs-modules","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"smbclient","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"winbind","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ctdb","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-winbind","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-winbind","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libparse-pidl-perl","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient-dev","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient-dev","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient0","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python-samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"registry-tools","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common-bin","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dev","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dsdb-modules","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-libs","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-testsuite","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-vfs-modules","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"smbclient","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"winbind","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"heimdal","fixed_in":["7.8.git20221115.a6cf945+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"heimdal","fixed_in":["7.8.git20221115.a6cf945+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"heimdal","fixed_in":["7.8.git20221115.a6cf945+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.16.6+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.16.6+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.16.6+dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"samba","fixed_in":["4.11.12-20.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"samba","fixed_in":["4.11.12-19.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"samba","fixed_in":["4.15.3-12.oe2203"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"heimdal","fixed_in":["1.6~git20131207+dfsg-1ubuntu1.2+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"heimdal","fixed_in":["1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"heimdal","fixed_in":["7.5.0+dfsg-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"heimdal","fixed_in":["7.7.0+dfsg-1ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"samba","fixed_in":["2:4.15.13+dfsg-0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"samba","fixed_in":["2:4.15.13+dfsg-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.14","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.15.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.15.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.16.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.16.6-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.3-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libparse-pidl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsmbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwbclient0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"registry-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-common-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-dsdb-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-vfs-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"smbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libparse-pidl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"registry-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dsdb-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-vfs-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"smbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.git20221115.a6cf945+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.git20221115.a6cf945+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.git20221115.a6cf945+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.16.6+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.16.6+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.16.6+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0+dfsg-3+deb10u1"}]}],"versions":["7.5.0+dfsg-3"],"bundled":7},{"source":"osv","ecosystem":"Debian:10","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5"}]}],"versions":["2:4.9.5+dfsg-5","2:4.9.5+dfsg-5+deb10u1","2:4.9.5+dfsg-5+deb10u2","2:4.9.5+dfsg-5+deb10u3","2:4.9.5+dfsg-5+deb10u4"],"bundled":7},{"source":"osv","ecosystem":"Debian:11","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-2+deb11u2"}]}],"versions":["7.7.0+dfsg-2","7.7.0+dfsg-2+deb11u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:11","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.13+dfsg-1~deb11u6"}]}],"versions":["2:4.13.13+dfsg-1~deb11u1","2:4.13.13+dfsg-1~deb11u2","2:4.13.13+dfsg-1~deb11u3","2:4.13.13+dfsg-1~deb11u4","2:4.13.13+dfsg-1~deb11u5","2:4.13.5+dfsg-2"],"bundled":6},{"source":"osv","ecosystem":"Mageia:8","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.1-1.2.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.8-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1.5.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"talloc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"tdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.7-2.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"tevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-20.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-19.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.3-12.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.12+git.535.7750e5c95ef-150300.3.43.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.482.1ac2c665c7-3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.482.1ac2c665c7-3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.482.1ac2c665c7-3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.482.1ac2c665c7-3.74.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6~git20131207+dfsg-1ubuntu1.2+esm3"}]}],"versions":["1.6~git20120403+dfsg1-3ubuntu0.1","1.6~git20120403+dfsg1-3ubuntu0.2","1.6~git20131207+dfsg-1ubuntu1","1.6~git20131207+dfsg-1ubuntu1.1","1.6~git20131207+dfsg-1ubuntu1.2","1.6~git20131207+dfsg-1ubuntu1.2+esm1","1.6~git20131207+dfsg-1ubuntu1.2+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3"}]}],"versions":["1.6~rc2+dfsg-10ubuntu1","1.7~git20150920+dfsg-4ubuntu1","1.7~git20150920+dfsg-4ubuntu1.16.04.1","1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1","1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0+dfsg-1ubuntu0.3"}]}],"versions":["7.4.0.dfsg.1-2","7.5.0+dfsg-1","7.5.0+dfsg-1ubuntu0.1","7.5.0+dfsg-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-1ubuntu1.3"}]}],"versions":["7.5.0+dfsg-3build1","7.7.0+dfsg-1","7.7.0+dfsg-1ubuntu1","7.7.0+dfsg-1ubuntu1.1","7.7.0+dfsg-1ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu0.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.7.0+dfsg-2ubuntu2","7.7.0+dfsg-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6~git20131207+dfsg-1ubuntu1.2+esm3"}]}],"versions":["1.6~git20120403+dfsg1-3ubuntu0.1","1.6~git20120403+dfsg1-3ubuntu0.2","1.6~git20131207+dfsg-1ubuntu1","1.6~git20131207+dfsg-1ubuntu1.1","1.6~git20131207+dfsg-1ubuntu1.2","1.6~git20131207+dfsg-1ubuntu1.2+esm1","1.6~git20131207+dfsg-1ubuntu1.2+esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm3"}]}],"versions":["1.6~rc2+dfsg-10ubuntu1","1.7~git20150920+dfsg-4ubuntu1","1.7~git20150920+dfsg-4ubuntu1.16.04.1","1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm1","1.7~git20150920+dfsg-4ubuntu1.16.04.1+esm2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.5.0+dfsg-1ubuntu0.3"}]}],"versions":["7.4.0.dfsg.1-2","7.5.0+dfsg-1","7.5.0+dfsg-1ubuntu0.1","7.5.0+dfsg-1ubuntu0.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"heimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.7.0+dfsg-1ubuntu1.3"}]}],"versions":["7.5.0+dfsg-3build1","7.7.0+dfsg-1","7.7.0+dfsg-1ubuntu1","7.7.0+dfsg-1ubuntu1.1","7.7.0+dfsg-1ubuntu1.2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.17~dfsg-0ubuntu1.20.04.4"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu0.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29"],"bundled":4},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP4","package":"libheimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-bp154.2.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libheimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-bp154.2.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"libheimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-bp153.2.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libheimdal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-bp153.2.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.2+git.273.a55a83528b9-1.1"}]}],"bundled":2}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137774","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://www.samba.org/samba/security/CVE-2022-3437.html","tags":["x_transferred","Vendor Advisory","web","advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3437","tags":["x_transferred","Third Party Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2023/02/08/1","tags":["mailing-list","x_transferred","article"]},{"url":"https://security.netapp.com/advisory/ntap-20230216-0008/","tags":["x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202309-06","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/202310-06","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html","tags":["mailing-list","x_transferred","article"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-3437","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3437","tags":["web","advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-3437","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16-els/CLSA-2023-1675372486","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1703011710","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3437.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-3437","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0468.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31172","tags":["report"]},{"url":"https://www.debian.org/security/2022/dsa-5286","tags":["web"]},{"url":"https://www.debian.org/security/2022/dsa-5287","tags":["web"]},{"url":"https://www.debian.org/lts/security/2022/dla-3206","tags":["web"]},{"url":"https://github.com/heimdal/heimdal/security/advisories/GHSA-q77c-9qvp-qfw4","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/AYXWFESBZJMBNACFDHWWH7KETGKUXDPO/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2023-0010.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30843","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-September/012209.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OO5PL2WBIOJ6AX5KEDZSYH6ILAFYPCOW/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/YOHL3O2H4FYUTUK2D4PURO24UAX3EBPW/","tags":["web"]},{"url":"https://www.samba.org/samba/security/CVE-2022-3592.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-42898.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/RWT32WRO3GIUCYYBMM7WJSBXB7UVCOAU/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FXHIAIPMFZWDIVEPCU6MTIM33HSORPOQ/","tags":["web"]},{"url":"https://www.samba.org/samba/security/CVE-2022-38023.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-37966.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-37967.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-45141.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VCTYD5EQRS73QZTWPOC2ZO2FL7MMYXMS/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/G2CYDXPFBQES2Z4KLZDILGXFFQ3VIGZ4/","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.15.0.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.0.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.1.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.2.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.3.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.4.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.5.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.6.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.7.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.8.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-2038","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20224395-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200102","tags":["report"]},{"url":"https://bugzilla.suse.com/1201490","tags":["report"]},{"url":"https://bugzilla.suse.com/1201492","tags":["report"]},{"url":"https://bugzilla.suse.com/1201493","tags":["report"]},{"url":"https://bugzilla.suse.com/1201495","tags":["report"]},{"url":"https://bugzilla.suse.com/1201496","tags":["report"]},{"url":"https://bugzilla.suse.com/1201689","tags":["report"]},{"url":"https://bugzilla.suse.com/1204254","tags":["report"]},{"url":"https://bugzilla.suse.com/1205126","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42898","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230081-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206504","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38023","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230160-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205385","tags":["report"]},{"url":"https://bugzilla.suse.com/1205386","tags":["report"]},{"url":"https://bugzilla.suse.com/1206546","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37967","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-3437","tags":["report"]},{"url":"https://github.com/heimdal/heimdal/security/advisories/GHSA-45j3-5v39-rf9j","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5800-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5822-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5822-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5936-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3437","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7582-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-44758","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-42898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-44640","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-45141","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-34966","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WO45C5LQHPOWEJHKWCXPWLI54XMTTYQP/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-41916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44640","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/VCW7YX6RG5EAFBRU3SLTXKN5NWVODXTH/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3592","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-3437","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","status":"published","published":"2023-01-12T00:00:00Z","modified":"2024-10-28T18:59:39.543Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2022-42813","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","status":"published","published":"2023-01-12T00:00:00Z","modified":"2024-10-28T18:59:39Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:05:15.649433Z"}],"nvd":[{"id":"CVE-2022-3437","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","status":"published","published":"2023-01-12T15:15:10.083Z","modified":"2026-06-17T04:59:31.587Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:07:35.157734Z"}],"osv":[{"id":"ALPINE-CVE-2022-3437","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","status":"published","published":"2023-01-12T15:15:10.083Z","modified":"2026-11-03T07:18:33.459242532Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-12995","title":"CVE-2022-3437 affecting package samba 4.12.5-7","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","status":"published","published":"2023-01-12T15:15:10Z","modified":"2026-04-21T04:22:31.271376Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"AZL-37016","title":"CVE-2022-3437 affecting package samba for versions less than 4.18.3-1","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","status":"published","published":"2023-01-12T15:15:10Z","modified":"2026-04-21T04:48:02.757686Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"BELL-CVE-2022-3437","title":"CVE-2022-3437 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:40.527Z","modified":"2026-01-26T09:46:54.049344Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-3437","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","status":"published","published":"2023-01-12T00:00:00Z","modified":"2026-10-28T02:30:53.612761117Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"DEBIAN-CVE-2022-3437","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","status":"published","published":"2023-01-12T15:15:10.083Z","modified":"2026-11-03T08:01:31.147829209Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"OESA-2022-2038","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\r\n\r\nThe DES (for Samba 4.11 and earlier) and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet.\r\n\r\nAffects - All versions of Samba since Samba 4.0 compiled with Heimdal Kerberos.\nSamba 4.15.11, 4.16.6 and 4.17.2 have been issued as security releases to correct the defect\r\n\r\nhttps://www.samba.org/samba/security/CVE-2022-3437.html(CVE-2022-3437)","status":"published","published":"2022-11-04T11:05:21Z","modified":"2026-08-18T01:17:21.637881568Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2022-3437","description":"A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.","status":"published","published":"2022-10-27T00:00:00Z","modified":"2026-04-22T13:24:41.767793Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"CLSA-2023-1675372486","title":"Fix CVE(s): CVE-2022-3437","description":"\n   * SECURITY UPDATE: heap-based buffer overflows in Heimdal ARC4 and DES3\n     - debian/patches/CVE-2022-3437.patch: add extra NULL pointer and buffer\n       boundaries checks, fix undefined behaviour and input data length\n       calculations, remove accidentally duplicated code in arcfour.c\n     - CVE-2022-3437","status":"published","published":"2023-02-02T21:14:46Z","modified":"2026-06-04T10:03:19.732641Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1703011710","title":"Fix CVE(s): CVE-2022-3437","description":"\n   * SECURITY UPDATE: A heap-based buffer overflow vulnerability was\n     found in Samba within the GSSAPI unwrap_des() and unwrap_des3()\n     routines of Heimdal\n     - debian/patches/CVE-2022-3437-1.patch: third_party/heimdal:\n       use constant-time memcmp() for arcfour unwrap\n     - debian/patches/CVE-2022-3437-3.patch: third_party/heimdal:\n       check buffer length against overflow for DES{,3} unwrap\n     - debian/patches/CVE-2022-3437-4.patch: third_party/heimdal:\n       don't pass NULL pointers to memcpy() in DES unwrap\n     - debian/patches/CVE-2022-3437-5.patch: third_party/heimdal:\n       use constant-time memcmp() in unwrap_des3()\n     - debian/patches/CVE-2022-3437-7.patch: third_party/heimdal:\n       pass correct length to _gssapi_verify_pad()\n     - debian/patches/CVE-2022-3437-8.patch: third_party/heimdal:\n       check the result of _gsskrb5_get_mech()\n     - debian/patches/CVE-2022-3437-9.patch: third_party/heimdal:\n       remove __func__ compatibility workaround\n     - debian/patches/CVE-2022-3437-10.patch: third_party/heimdal:\n       check for overflow in _gsskrb5_get_mech()\n     - debian/patches/CVE-2022-3437-11.patch: third_party/heimdal:\n       avoid undefined behaviour in _gssapi_verify_pad()\n     - CVE-2022-3437","status":"published","published":"2023-12-19T18:48:34Z","modified":"2026-06-04T10:03:48.007876Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"DLA-3206-1","title":"heimdal - security update","status":"published","published":"2022-11-26T00:00:00Z","modified":"2026-03-09T01:19:51.266692Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"DLA-3792-1","title":"samba - security update","status":"published","published":"2024-04-22T00:00:00Z","modified":"2026-03-09T01:22:52.104905Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"DSA-5287-1","title":"heimdal - security update","status":"published","published":"2022-11-22T00:00:00Z","modified":"2026-03-09T02:11:16.81337Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"DSA-5647-1","title":"samba - security update","status":"published","published":"2024-03-24T00:00:00Z","modified":"2026-03-09T02:10:06.716089Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2022-0468","title":"Updated heimdal packages fix security vulnerability","description":"Isaac Boukris reported that the Heimdal KDC before 7.7.1 does not apply\ndelegation_not_allowed (aka not-delegated) user attributes for S4U2Self.\nInstead the forwardable flag is set even if the impersonated client has\nthe not-delegated flag set. (CVE-2019-14870)\n\nJoseph Sutton discovered that the Heimdal KDC before 7.7.1 does not check\nfor missing sname in TGS-REQ (Ticket Granting Server Request)\nbefore dereferencing. An authenticated user could use this flaw to\ncrash the KDC. (CVE-2021-3671)\n\nIt was discovered that Heimdal is prone to a NULL dereference in acceptors\nwhen the initial SPNEGO token has no acceptable mechanisms, which may\nresult in denial of service for a server application that uses the Simple\nand Protected GSSAPI Negotiation Mechanism (SPNEGO). (CVE-2021-44758)\n\nEvgeny Legerov reported that the DES and Triple-DES decryption routines in\nthe Heimdal GSSAPI library before 7.7.1 were prone to buffer overflow on\nmalloc() allocated memory when presented with a maliciously small packet.\nIn addition, the Triple-DES and RC4 (arcfour) decryption routine were\nprone to non-constant time leaks, which could potentially yield to a leak\nof secret key material when using these ciphers. (CVE-2022-3437)\n\nIt was discovered that Heimdal's PKI certificate validation library before\n7.7.1 can under some circumstances perform an out-of-bounds memory access\nwhen normalizing Unicode, which may result in denial of service. (CVE-2022-41916)\n\nGreg Hudson discovered an integer multiplication overflow in the Privilege\nAttribute Certificate (PAC) parsing routine, which may result in denial of\nservice for Heimdal KDCs and possibly Heimdal servers (e.g., via GSS-API)\non 32-bit systems. (CVE-2022-42898)\n\nDouglas Bagnall and the Heimdal maintainers independently discovered that\nHeimdal's ASN.1 compiler before 7.7.1 generates code that allows specially\ncrafted DER encodings of CHOICEs to invoke the wrong free() function on the\ndecoded structure upon decode error, which may result in remote code\nexecution in the Heimdal KDC and possibly the Kerberos client, the X.509\nlibrary, and other components as well. (CVE-2022-44640)\n","status":"published","published":"2022-12-17T18:48:08Z","modified":"2026-04-16T04:43:39.031315614Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"MGASA-2023-0010","title":"Updated samba packages fix security vulnerability","description":"There is a limited write heap buffer overflow in the GSSAPI unwrap_des()\nand unwrap_des3() routines of Heimdal (included in Samba). Some SMB1 write\nrequests were not correctly range checked to ensure the client had sent\nenough data to fulfill the write, allowing server memory contents to be\nwritten into the file (or printer) instead of client supplied data. The\nclient cannot control the area of the server memory that is written to the\nfile (or printer) (CVE-2022-3437)\n\nA symlink following vulnerability was found in Samba, where a user can\ncreate a symbolic link that will make 'smbd' escape the configured share\npath. This flaw allows a remote user with access to the exported part of\nthe file system under a share via SMB1 unix extensions or NFS to create\nsymlinks to files outside the 'smbd' configured share path and gain access\nto another restricted server's filesystem. (CVE-2022-3592)\n\nActive directory elevation of privilege vulnerability (CVE-2022-37966)\n\nActive directory elevation of privilege vulnerability  (CVE-2022-37967)\n\nA flaw was found in samba. The Netlogon RPC implementations may use the\nrc4-hmac encryption algorithm, which is considered weak and should be\navoided even if the client supports more modern encryption types. This\nissue could allow an attacker who knows the plain text content\ncommunicated between the samba client and server to craft data with the\nsame MD5 calculation and replace it without being detected.\n(CVE-2022-38023)\n\nActive directory integer overflow (CVE-2022-42898)\n\nActive directory can be forced to issue weak rc4-hmac encrypted tickets\n(CVE-2022-45141)\n","status":"published","published":"2023-01-24T07:58:24Z","modified":"2026-04-16T04:44:11.647853485Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2023:0019-1","title":"Security update for libheimdal","description":"This update for libheimdal fixes the following issues:\n\nUpdate to version 7.8.0\n\n- CVE-2022-42898 PAC parse integer overflows\n- CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour\n- CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array\n- CVE-2021-44758 A null pointer de-reference DoS in SPNEGO acceptors\n- CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ\n- CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec\n- CVE-2019-14870: Validate client attributes in protocol-transition\n","status":"published","published":"2023-01-16T08:42:44Z","modified":"2026-02-04T03:44:03.250796Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2023:0020-1","title":"Security update for libheimdal","description":"This update for libheimdal fixes the following issues:\n\nUpdate to version 7.8.0\n\n- CVE-2022-42898 PAC parse integer overflows\n- CVE-2022-3437 Overflows and non-constant time leaks in DES{,3} and arcfour\n- CVE-2022-41916 Fix Unicode normalization read of 1 bytes past end of array\n- CVE-2021-44758 A null pointer de-reference DoS in SPNEGO acceptors\n- CVE-2021-3671 A null pointer de-reference when handling missing sname in TGS-REQ\n- CVE-2022-44640 Heimdal KDC: invalid free in ASN.1 codec\n- CVE-2019-14870: Validate client attributes in protocol-transition\n","status":"published","published":"2023-01-16T08:42:52Z","modified":"2026-02-04T02:58:44.117973Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12454-1","title":"ctdb-4.17.2+git.273.a55a83528b9-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.17.2+git.273.a55a83528b9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:05:26.808368Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2024:12580-1","title":"libasn1-8-7.8.0-1.1 on GA media","description":"These are all security issues fixed in the libasn1-8-7.8.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:39.768947Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:4395-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nVersion update to 4.15.12.\n\nSecurity issues fixed:\n\n- CVE-2022-2031: Fixed AD users that could have bypassed certain restrictions associated with changing passwords (bsc#1201495).\n- CVE-2022-32742: Fixed SMB1 code that does not correctly verify SMB1write, SMB1write_and_close, SMB1write_and_unlock lengths (bsc#1201496).\n- CVE-2022-32744: Fixed AD users that could have forged password change requests for any user (bsc#1201493).\n- CVE-2022-32745: Fixed AD users that could have crashed the server process with an LDAP add or modify request (bsc#1201492).\n- CVE-2022-32746: Fixed a use-after-free occurring in database audit logging (bsc#1201490).\n- CVE-2022-3437: Fixed buffer overflow in Heimdal unwrap_des3() (bsc#1204254).\n- CVE-2022-42898: Fixed Samba buffer overflow vulnerabilities on 32-bit systems (bsc#1205126).\n\nBug fixes:\n\n- Install a systemd drop-in file for named service to allow read/write access to the DLZ directory (bsc#1201689).\n- Possible use after free of connection_struct when iterating smbd_server_connection-\u003econnections (bsc#1200102).\n","status":"published","published":"2022-12-09T10:03:00Z","modified":"2026-02-04T04:16:44.031444Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0081-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- Updated to version 4.15.13:\n  - CVE-2022-38023: Removed weak cryptographic algorithms from the\n    Netlogon RPC implementation (bsc#1206504).\n  - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on\n    32-bit systems (bsc#1205126).\n  - CVE-2022-3437: Fixed a buffer overflow in Heimdal unwrap_des3()\n    (bsc#1204254).\n  - CVE-2022-32742: Fixed an information disclosure issue affecting\n    SMB1 servers (bsc#1201496).\n  - CVE-2022-32746: Fixed a use-after-free occurring in database audit\n    logging (bsc#1201490).\n  - CVE-2022-2031: Fixed an AD restriction bypass associated with\n    changing passwords (bsc#1201495).\n  - CVE-2022-32745: Fixed a remote server crash that could be triggered\n    with certain LDAP requests (bsc#1201492).\n  - CVE-2022-32744: Fixed an issue where AD users could have forged\n    password change requests on behalf of other users (bsc#1201493).\n\nOther fixes:\n  - Fixed a potential crash due to a concurrency issue (bsc#1200102).\n","status":"published","published":"2023-01-12T09:34:10Z","modified":"2026-02-04T03:46:14.602899Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0160-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n\n- Updated to version 4.15.13:\n  - CVE-2022-37966: Fixed an issue where a weak cipher would be\n    selected to encrypt session keys, which could lead to privilege\n    escalation (bsc#1205385).\n  - CVE-2022-37967: Fixed a potential privilege escalation issue via\n    constrained delegation due to weak a cryptographic algorithm\n    being selected (bsc#1205386).\n  - CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n    Secure channel (bsc#1206504).\n\n- Updated to version 4.15.12:\n  - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on\n  32-bit systems (bsc#1205126).\n\n- Updated to version 4.15.11:\n  - CVE-2022-3437: Fixed a buffer overflow in Heimdal unwrap_des3()\n  (bsc#1204254).\n\n- Updated to version 4.15.10:\n  - Fixed a potential crash due to a concurrency issue (bsc#1200102).\n\n- Updated to version 4.15.9:\n  - CVE-2022-32742: Fixed an information leak that could be triggered\n    via SMB1 (bsc#1201496).\n  - CVE-2022-32746: Fixed a memory corruption issue in database\n    audit logging (bsc#1201490).\n  - CVE-2022-2031: Fixed AD restrictions bypass associated with\n    changing passwords (bsc#1201495).\n  - CVE-2022-32745: Fixed a remote server crash that could be\n    triggered with certain LDAP requests (bsc#1201492).\n  - CVE-2022-32744: Fixed an issue where AD users could have forged\n    password change requests on behalf of other users (bsc#1201493).\n\nOther fixes:\n\n- Fixed a problem when using bind as samba-ad-dc backend related to\n  the named service (bsc#1201689).\n","status":"published","published":"2023-01-26T17:22:47Z","modified":"2026-02-04T03:17:36.805483Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5800-1","title":"heimdal vulnerabilities","description":"It was discovered that Heimdal incorrectly handled certain SPNEGO tokens. A\nremote attacker could possibly use this issue to cause a denial of service.\n(CVE-2021-44758)\n\nEvgeny Legerov discovered that Heimdal incorrectly handled memory when\nperforming certain DES decryption operations. A remote attacker could use\nthis issue to cause a denial of service, or possibly execute arbitrary\ncode. (CVE-2022-3437)\n\nGreg Hudson discovered that Kerberos PAC implementation used in Heimdal\nincorrectly handled certain parsing operations. A remote attacker could use\nthis issue to cause a denial of service, or possibly execute arbitrary\ncode. (CVE-2022-42898)\n\nIt was discovered that Heimdal's KDC did not properly handle certain error\nconditions. A remote attacker could use this issue to cause a denial of\nservice, or possibly execute arbitrary code. (CVE-2022-44640)\n","status":"published","published":"2023-01-12T17:12:53Z","modified":"2026-06-29T13:50:45.183826938Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5822-1","title":"samba vulnerabilities","description":"It was discovered that Samba incorrectly handled the bad password count\nlogic. A remote attacker could possibly use this issue to bypass bad\npasswords lockouts. This issue was only addressed in Ubuntu 22.10.\n(CVE-2021-20251)\n\nEvgeny Legerov discovered that Samba incorrectly handled buffers in\ncertain GSSAPI routines of Heimdal. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-3437)\n\nTom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos\nkeys. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-37966, CVE-2022-37967)\n\nIt was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure\nChannel. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-38023)\n\nGreg Hudson discovered that Samba incorrectly handled PAC parsing. On\n32-bit systems, a remote attacker could use this issue to escalate\nprivileges, or possibly execute arbitrary code. (CVE-2022-42898)\n\nJoseph Sutton discovered that Samba could be forced to issue rc4-hmac\nencrypted Kerberos tickets. A remote attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-45141)\n\nWARNING: The fixes included in these updates introduce several important\nbehavior changes which may cause compatibility problems interacting with\nsystems still expecting the former behavior. Please see the following\nupstream advisories for more information:\n\nhttps://www.samba.org/samba/security/CVE-2022-37966.html\nhttps://www.samba.org/samba/security/CVE-2022-37967.html\nhttps://www.samba.org/samba/security/CVE-2022-38023.html\n","status":"published","published":"2023-01-24T12:58:42Z","modified":"2026-04-27T16:32:25.164245112Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5936-1","title":"samba vulnerabilities","description":"Evgeny Legerov discovered that Samba incorrectly handled buffers in\ncertain GSSAPI routines of Heimdal. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-3437)\n\nTom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos\nkeys. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-37966, CVE-2022-37967)\n\nIt was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure\nChannel. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-38023)\n\nGreg Hudson discovered that Samba incorrectly handled PAC parsing. On\n32-bit systems, a remote attacker could use this issue to escalate\nprivileges, or possibly execute arbitrary code. (CVE-2022-42898)\n\nJoseph Sutton discovered that Samba could be forced to issue rc4-hmac\nencrypted Kerberos tickets. A remote attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-45141)\n\nWARNING: This update upgrades the version of Samba to 4.15.13. Please see\nthe upstream release notes for important changes in the new version:\n\nhttps://www.samba.org/samba/history/samba-4.15.0.html\n\nIn addition, the security fixes included in this new version introduce\nseveral important behavior changes which may cause compatibility problems\ninteracting with systems still expecting the former behavior. Please see\nthe following upstream advisories for more information:\n\nhttps://www.samba.org/samba/security/CVE-2022-37966.html\nhttps://www.samba.org/samba/security/CVE-2022-37967.html\nhttps://www.samba.org/samba/security/CVE-2022-38023.html\n","status":"published","published":"2023-03-08T13:02:34Z","modified":"2026-04-27T16:47:21.666650445Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-7582-1","title":"samba vulnerabilities","description":"Evgeny Legerov discovered that Samba incorrectly handled buffers in\ncertain GSSAPI routines of Heimdal. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-3437)\n\nGreg Hudson discovered that Samba incorrectly handled PAC parsing. On\n32-bit systems, a remote attacker could use this issue to escalate\nprivileges, or possibly execute arbitrary code. (CVE-2022-42898)\n\nJoseph Sutton discovered that Samba could be forced to issue rc4-hmac\nencrypted Kerberos tickets. A remote attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-45141)\n\nFlorent Saudel discovered that Samba incorrectly handled certain Spotlight\nrequests. A remote attacker could possibly use this issue to cause Samba to\nconsume resources, leading to a denial of service. (CVE-2023-34966)\n","status":"published","published":"2025-06-19T10:33:58Z","modified":"2026-06-25T13:32:30.593559878Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}