CVE-2022-32746CWE-416

A flaw was found in the Samba AD LDAP server

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

A flaw was found in the Samba AD LDAP server. The AD DC database audit logging module can access LDAP message values freed by a preceding database module, resulting in a use-after-free issue. This issue is only possible when modifying certain privileged attributes, such as userAccountControl.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01318 · 70.6th percentile
Weakness
CWE-416 · Use After Free
Published
2022-08-25T00:00Z
EPSS history
Timeline
  • 25 AUG 00:00Z
    A flaw was found in the Samba AD LDAP server
    cvelistv5