Samba server heap buffer overflow (CVE-2022-3437)

Summary

A heap-based buffer overflow vulnerability in the Heimdal GSSAPI library could allow a remote attacker to cause a denial of service or execute arbitrary code.

Vulnerability ID

Vulnerability Overview

CVE-2022-3437

A heap-based buffer overflow was discovered in the Heimdal implementation of the GSSAPI library (libgssapi_krb5), specifically within the DES and Triple-DES decryption routines. An unauthenticated, remote attacker could exploit this flaw by sending a specially crafted malicious GSS-API token to an application functioning as a GSS-API acceptor (such as a Samba server). Successful exploitation could lead to an application crash (denial of service) or potentially allow the execution of arbitrary code with the privileges of the affected service.

Affected Supported TeraStations

TS7010 TS6000 TS5020 / TS3030 TS5010/3020/3010 - Fixed in firmware version 6.12

 

Back to Security Notices

Date	Description
10/10/2023	Initial release
09/09/2026	Update

Back to Security Notices