[Samba] Does CVE-2022-32744 apply if your Samba server is not a KDC?

Andrew Bartlett abartlet at samba.org
Sun Dec 11 18:46:04 UTC 2022

On Sun, 2022-12-11 at 12:40 +0000, Jim Brand via samba wrote:
> This is in reference to 
> https://www.samba.org/samba/security/CVE-2022-32744.html
> Our KDC's are on Windows, not Linux so I assume we are not vulnerable
> here. 

Correct, this is just a KDC side issue.

Andrew Bartlett

Andrew Bartlett (he/him)       https://samba.org/~abartlet/Samba Team Member (since 2001) https://samba.orgSamba Team Lead, Catalyst IT   https://catalyst.net.nz/services/samba
Samba Development and Support, Catalyst IT - Expert Open SourceSolutions

More information about the samba mailing list