CVE-2022-2127

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description The issue is related to an out-of-bounds read vulnerability in Samba due to insufficient length checks in the winbindd pam auth crap.c component. This vulnerability can be exploited when performing NTLM authentication, as the client replies to cryptographic challenges back to the server with variable lengths, and Winbind fails to check the lan manager response length. A maliciously crafted request can trigger an out-of-bounds read in Winbind, possibly resulting in a crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.