git: ce6714de120d - main - security/vuxml: add entry for CVE-2022-3437
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 25 Oct 2022 23:56:22 UTC
The branch main has been updated by timur:
URL: https://cgit.FreeBSD.org/ports/commit/?id=ce6714de120d2f91bf94f95c67866851d7768f34
commit ce6714de120d2f91bf94f95c67866851d7768f34
Author: Timur I. Bakeyev <timur@FreeBSD.org>
AuthorDate: 2022-10-25 23:54:44 +0000
Commit: Timur I. Bakeyev <timur@FreeBSD.org>
CommitDate: 2022-10-25 23:54:44 +0000
security/vuxml: add entry for CVE-2022-3437
There is a limited write heap buffer overflow in the GSSAPI unwrap_des()
and unwrap_des3() routines of Heimdal (included in Samba).
---
security/vuxml/vuln-2022.xml | 37 +++++++++++++++++++++++++++++++++++++
1 file changed, 37 insertions(+)
diff --git a/security/vuxml/vuln-2022.xml b/security/vuxml/vuln-2022.xml
index 96268541954f..9ad65771d0e2 100644
--- a/security/vuxml/vuln-2022.xml
+++ b/security/vuxml/vuln-2022.xml
@@ -1,3 +1,40 @@
+ <vuln vid="1c5f3fd7-54bf-11ed-8d1e-005056a311d1">
+ <topic>samba -- buffer overflow in Heimdal unwrap_des3()</topic>
+ <affects>
+ <package>
+ <name>samba412</name>
+ <range><lt>4.12.16</lt></range>
+ </package>
+ <package>
+ <name>samba413</name>
+ <range><lt>4.13.17_4</lt></range>
+ </package>
+ <package>
+ <name>samba416</name>
+ <range><lt>4.16.6</lt></range>
+ </package>
+ </affects>
+ <description>
+ <body xmlns="http://www.w3.org/1999/xhtml">
+ <p>The Samba Team reports:</p>
+ <blockquote cite="https://www.samba.org/samba/security/CVE-2022-3437.html">
+ <p>The DES (for Samba 4.11 and earlier) and Triple-DES decryption
+ routines in the Heimdal GSSAPI library allow a length-limited write
+ buffer overflow on malloc() allocated memory when presented with a
+ maliciously small packet.</p>
+ </blockquote>
+ </body>
+ </description>
+ <references>
+ <cvename>CVE-2022-3437</cvename>
+ <url>https://www.samba.org/samba/security/CVE-2022-3437.html</url>
+ </references>
+ <dates>
+ <discovery>2022-08-02</discovery>
+ <entry>2022-10-25</entry>
+ </dates>
+ </vuln>
+
<vuln vid="b4ef02f4-549f-11ed-8ad9-3065ec8fd3ec">
<topic>chromium -- multiple vulnerabilities</topic>
<affects>