A vulnerability in Samba allowing any user to change the password.
Corrective releases of the Samba packages 4.16.4, 4.15.9, and 4.14.14 have been published, addressing 5 vulnerabilities. The release of the package updates in distributions can be tracked on the pages: Debian, Ubuntu, RHEL, SUSE, Arch, FreeBSD. The most critical vulnerability (CVE-2022-32744) allows Active Directory domain users to change the password of any user, including that of the administrator, thus gaining full control over the domain. The issue […]
