Samba dNSHostName Write via Missing Validated-DNS-Host-Name Right
CVE-2022-32743 Published on September 1, 2022

Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileged users to write it.

Vendor Advisory Vendor Advisory NVD

Weakness Type

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.


Products Associated with CVE-2022-32743

stack.watch emails you whenever new vulnerabilities are published in Samba or Fedora Project Fedora. Just hit a watch button to start following.

 
 

Exploit Probability

EPSS
1.15%
Percentile
78.25%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.