Related Vulnerabilities: CVE-2022-32745  

A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.

Description

A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.

Statement

Red Hat Enterprise Linux is not affected by this flaw as Samba AD (Active Directory) doesn't get built in RHEL.

Red Hat Enterprise Linux is not affected by this flaw as Samba AD (Active Directory) doesn't get built in RHEL.

Additional Information

  • Bugzilla 2108211: CVE-2022-32745 samba: AD users can crash the server process with an LDAP add or modify request
  • (CWE-125|CWE-457): Out-of-bounds Read or Use of Uninitialized Variable
  • FAQ: Frequently asked questions about CVE-2022-32745