{"action":"Upgrade samba to 4.15.9-r0 or later.","affected":[{"fixed":"4.15.9-r0","introduced":"4.3.0"}],"component":"samba","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.23","exploited":false,"fixed_versions":["4.15.9-r0"],"id":"tcs_01M5NE6AM0B96RP0R3CA8FYN1T","modified_at":"2026-10-15T07:17:54.223977353Z","published_at":"2022-08-25T18:15:10.497Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2022-32744","https://security.alpinelinux.org/vuln/CVE-2022-32744"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2022-32744#Alpine:v3.23/samba","url":"https://osv.dev/vulnerability/ALPINE-CVE-2022-32744"}],"summary":"A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabli"}