The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba.
CVE-2022-3437 allows remote authenticated users to bypass security constraint and conduct attacks via a susceptible version of ADM with SMB service enabled.
CVE-2022-3592 will not affect ASUSTOR products as this vulnerability only affect Samba 4.17 and later.
CVE-2022-42898 will not affect current ASUSTOR products with ADM 4.0 and 4.1 as this vulnerability only affect 32-bit systems.
• Samba package has been updated on ADM 4.2.0.RC81 to fix these potential vulnerabilities. |