CVE-2022-32745 Null dereference in samba

What is CVE-2022-32745?

CVE-2022-32745 is a high-severity vulnerability in Samba Samba, published on 25 Aug 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.

Weakness: CWE-908, CWE-125

Which versions are affected by CVE-2022-32745?

It affects 1 product.

Products include Samba Samba.

How do I fix CVE-2022-32745?

Apply the vendor's patch.

Is CVE-2022-32745 being exploited?

There is no known exploitation of CVE-2022-32745 in the wild and no public exploit code.

Other vulnerabilities in Samba Samba

• CVE-2012-1182 Integer overflow in n/a Critical 10.0
• CVE-2007-2446 Memory corruption in n/a Critical 10.0
• CVE-2004-0600 Memory corruption in n/a Critical 10.0
• CVE-1999-0810 Denial of service in n/a Critical 10.0
• CVE-1999-0182 Memory corruption in n/a Critical 10.0

All Samba Samba vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as ALPINE-CVE-2022-32745, AZL-44790, DEBIAN-CVE-2022-32745, ECHO-9f43-b0b4-b84f, GHSA-q9mh-p233-5pvv, UBUNTU-CVE-2022-32745.