{"id":"CLSA-2023-1703011710","summary":"Fix CVE(s): CVE-2022-3437","details":"\n   * SECURITY UPDATE: A heap-based buffer overflow vulnerability was\n     found in Samba within the GSSAPI unwrap_des() and unwrap_des3()\n     routines of Heimdal\n     - debian/patches/CVE-2022-3437-1.patch: third_party/heimdal:\n       use constant-time memcmp() for arcfour unwrap\n     - debian/patches/CVE-2022-3437-3.patch: third_party/heimdal:\n       check buffer length against overflow for DES{,3} unwrap\n     - debian/patches/CVE-2022-3437-4.patch: third_party/heimdal:\n       don't pass NULL pointers to memcpy() in DES unwrap\n     - debian/patches/CVE-2022-3437-5.patch: third_party/heimdal:\n       use constant-time memcmp() in unwrap_des3()\n     - debian/patches/CVE-2022-3437-7.patch: third_party/heimdal:\n       pass correct length to _gssapi_verify_pad()\n     - debian/patches/CVE-2022-3437-8.patch: third_party/heimdal:\n       check the result of _gsskrb5_get_mech()\n     - debian/patches/CVE-2022-3437-9.patch: third_party/heimdal:\n       remove __func__ compatibility workaround\n     - debian/patches/CVE-2022-3437-10.patch: third_party/heimdal:\n       check for overflow in _gsskrb5_get_mech()\n     - debian/patches/CVE-2022-3437-11.patch: third_party/heimdal:\n       avoid undefined behaviour in _gssapi_verify_pad()\n     - CVE-2022-3437","modified":"2026-06-04T09:47:00.794240273Z","published":"2023-12-19T18:48:34Z","upstream":["CVE-2022-3437"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1703011710"}],"affected":[{"package":{"name":"ctdb","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/ctdb?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"libnss-winbind","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libnss-winbind?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"libpam-winbind","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libpam-winbind?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"libparse-pidl-perl","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libparse-pidl-perl?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"libsmbclient","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libsmbclient?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"libsmbclient-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libsmbclient-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"libwbclient-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libwbclient-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"libwbclient0","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libwbclient0?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"python-samba","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/python-samba?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"registry-tools","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/registry-tools?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"samba","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"samba-common","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-common?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"samba-common-bin","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-common-bin?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"samba-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"samba-dsdb-modules","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-dsdb-modules?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"samba-libs","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-libs?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"samba-testsuite","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-testsuite?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"samba-vfs-modules","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/samba-vfs-modules?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"smbclient","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/smbclient?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}},{"package":{"name":"winbind","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/winbind?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els5"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2023-1703011710.json"}}],"schema_version":"1.7.5"}