CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default...
5.9 MediumFix available
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
0.48%Up 0.4 points since Apr 4, 2023
What each source reports
NVD Score used
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
- Record
CVE-2023-0922- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
CVE List
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
- Record
CVE-2023-0922- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
EUVDEUVD-2023-12909
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
- Record
EUVD-2023-12909- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v9cf-pxq6-w297
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default...
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
- Record
GHSA-v9cf-pxq6-w297- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
OSVAZL-26215
CVE-2023-0922 affecting package samba 4.12.5-7
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
- Record
AZL-26215- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVAZL-37020
CVE-2023-0922 affecting package samba for versions less than 4.18.3-1
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
- Record
AZL-37020- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 16 moreShow less
OSV
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
- Record
CVE-2023-0922- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N - Weakness
- CWE-319
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
- Record
DEBIAN-CVE-2023-0922- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2023-1231
samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.(CVE-2023-0922)
- Record
OESA-2023-1231- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2023-1232
samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.(CVE-2023-0922)
- Record
OESA-2023-1232- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2023-1233
samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.(CVE-2023-0225)
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.(CVE-2023-0922)
- Record
OESA-2023-1233- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVOESA-2023-1248
samba security update
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.(CVE-2023-0922)
- Record
OESA-2023-1248- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
- Record
UBUNTU-CVE-2023-0922- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N - CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVCLSA-2026-1778766810 No score
samba: Fix of CVE-2023-0922
- CVE-2023-0922: set default ldap client sasl wrapping to seal
- Refresh samba-pubkey_AA99442FB680B620.gpg (expiry extended to 2027-12-12)
- Record
CLSA-2026-1778766810- Updated
- 2026-11-02
OSVMGASA-2023-0127 No score
Updated ldb/samba packages fix security vulnerability
Deletion of AD DC "dnsHostname" attribute by unprivileged authenticated users (CVE-2023-0225) Read access controlled AD LDAP attributes (CVE-2023-0614) Cleartext password sending by AD DC admin tool (CVE-2023-0922)
- Record
MGASA-2023-0127- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12831-1 No score
ctdb-4.18.1+git.298.4ccf830b2a4-1.1 on GA media
These are all security issues fixed in the ctdb-4.18.1+git.298.4ccf830b2a4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12831-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1682-1 No score
Security update for samba
This update for samba fixes the following issues:
- CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext (bso#15315) (bsc#1209481).
- Record
SUSE-SU-2023:1682-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1683-1 No score
Security update for samba
This update for samba fixes the following issues:
- CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext (bso#15315) (bsc#1209481).
- Record
SUSE-SU-2023:1683-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1684-1 No score
Security update for samba
This update for samba fixes the following issues:
- CVE-2023-0922: Fixed Samba AD DC admin tool samba-tool sending passwords in cleartext (bso#15315) (bsc#1209481).
The following non-security bug was fixed:
- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).
- Record
SUSE-SU-2023:1684-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1687-1 No score
Security update for ldb, samba
This update for ldb, samba fixes the following issues:
ldb:
- CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
samba:
- CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).
- CVE-2023-0225: Fixed deletion of AD DC 'dnsHostname' attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
The following non-security bug was fixed:
- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).
- Record
SUSE-SU-2023:1687-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1689-1 No score
Security update for ldb, samba
This update for ldb, samba fixes the following issues:
ldb:
- CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
samba:
- CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).
- CVE-2023-0225: Fixed deletion of AD DC 'dnsHostname' attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
The following non-security bug were fixed:
- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).
- Ship missing samba-winbind-libs-32bit package (bsc#1207996)
- Ship missing samba-libs to SLE Micro 5.3 (bsc#1207723)
- Record
SUSE-SU-2023:1689-1- Updated
- 2026-11-02
OSVUSN-5993-1 No score
samba vulnerabilities
Demi Marie Obenour discovered that the Samba LDAP server incorrectly handled certain confidential attribute values. A remote authenticated attacker could possibly use this issue to obtain certain sensitive information. (CVE-2023-0614)
Andrew Bartlett discovered that the Samba AD DC admin tool incorrectly sent passwords in cleartext. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2023-0922)
- Record
USN-5993-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaAzure Linux:2 |
through 4.12.5-7 | None known |
sambaAzure Linux:3 |
before 4.18.3-1 | 4.18.3-1 |
ctdbTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
libnetapiTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
libnetapi-develTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
libsmbclientTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
libsmbclient-develTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
libwbclientTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
libwbclient-develTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
python3-sambaTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
Show 89 moreShow less
| Package | Affected | Fixed |
|---|---|---|
python3-samba-dcTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
python3-samba-develTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
python3-samba-testTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
sambaTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-clientTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-client-libsTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-commonTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-common-libsTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-common-toolsTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-dc-libsTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-dcerpcTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-develTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-krb5-printingTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-ldb-ldap-modulesTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-libsTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-pidlTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-testTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-test-libsTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-toolsTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-usersharesTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-vfs-iouringTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-winbindTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-winbind-clientsTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-winbind-krb5-locatorTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-winbind-modulesTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
samba-winexeTuxCare:AlmaLinux:9.2 |
before 4.17.5-103.el9_2.alma.tuxcare.els7 | 4.17.5-103.el9_2.alma.tuxcare.els7 |
sambaDebian:12 |
before 2:4.17.7+dfsg-1 | 2:4.17.7+dfsg-1 |
sambaDebian:13 |
before 2:4.17.7+dfsg-1 | 2:4.17.7+dfsg-1 |
sambaDebian:14 |
before 2:4.17.7+dfsg-1 | 2:4.17.7+dfsg-1 |
ldbMageia:8 From an advisory covering 3 CVEs |
before 2.5.3-1.mga8 | 2.5.3-1.mga8 |
sambaMageia:8 From an advisory covering 3 CVEs |
before 4.16.10-1.mga8 | 4.16.10-1.mga8 |
sambaopenEuler:20.03-LTS-SP1 |
before 4.11.12-28.oe1 | 4.11.12-28.oe1 |
sambaopenEuler:22.03-LTS |
before 4.15.3-20.oe2203 | 4.15.3-20.oe2203 |
sambaopenEuler:22.03-LTS-SP1 From an advisory covering 2 CVEs |
before 4.17.5-4.oe2203sp1 | 4.17.5-4.oe2203sp1 |
sambaopenEuler:20.03-LTS-SP3 |
before 4.11.12-28.oe1 | 4.11.12-28.oe1 |
sambaSUSE:Linux Enterprise High Availability Extension 15 SP2 |
before 4.11.14+git.386.cc81f3dca2-150200.4.47.1 | 4.11.14+git.386.cc81f3dca2-150200.4.47.1 |
sambaSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 4.11.14+git.386.cc81f3dca2-150200.4.47.1 | 4.11.14+git.386.cc81f3dca2-150200.4.47.1 |
sambaSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 4.11.14+git.386.cc81f3dca2-150200.4.47.1 | 4.11.14+git.386.cc81f3dca2-150200.4.47.1 |
sambaSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 4.11.14+git.386.cc81f3dca2-150200.4.47.1 | 4.11.14+git.386.cc81f3dca2-150200.4.47.1 |
sambaSUSE:Enterprise Storage 7 |
before 4.11.14+git.386.cc81f3dca2-150200.4.47.1 | 4.11.14+git.386.cc81f3dca2-150200.4.47.1 |
sambaopenSUSE:Leap 15.4 |
before 4.11.14+git.386.cc81f3dca2-150200.4.47.1 | 4.11.14+git.386.cc81f3dca2-150200.4.47.1 |
sambaSUSE:Linux Enterprise High Availability Extension 15 SP1 |
before 4.9.5+git.554.abee30cf06-150100.3.77.1 | 4.9.5+git.554.abee30cf06-150100.3.77.1 |
sambaSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 4.9.5+git.554.abee30cf06-150100.3.77.1 | 4.9.5+git.554.abee30cf06-150100.3.77.1 |
sambaSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 4.9.5+git.554.abee30cf06-150100.3.77.1 | 4.9.5+git.554.abee30cf06-150100.3.77.1 |
sambaSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 4.9.5+git.554.abee30cf06-150100.3.77.1 | 4.9.5+git.554.abee30cf06-150100.3.77.1 |
sambaopenSUSE:Leap 15.4 |
before 4.9.5+git.554.abee30cf06-150100.3.77.1 | 4.9.5+git.554.abee30cf06-150100.3.77.1 |
sambaSUSE:Linux Enterprise High Availability Extension 12 SP5 |
before 4.15.13+git.594.449ec4a79a1-3.80.1 | 4.15.13+git.594.449ec4a79a1-3.80.1 |
sambaSUSE:Linux Enterprise Software Development Kit 12 SP5 |
before 4.15.13+git.594.449ec4a79a1-3.80.1 | 4.15.13+git.594.449ec4a79a1-3.80.1 |
sambaSUSE:Linux Enterprise Server 12 SP5 |
before 4.15.13+git.594.449ec4a79a1-3.80.1 | 4.15.13+git.594.449ec4a79a1-3.80.1 |
sambaSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 4.15.13+git.594.449ec4a79a1-3.80.1 | 4.15.13+git.594.449ec4a79a1-3.80.1 |
sambaSUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Manager Proxy 4.2 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Manager Proxy 4.2 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Manager Server 4.2 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Manager Server 4.2 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Micro 5.1 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
ldbSUSE:Linux Enterprise Micro 5.2 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Micro 5.2 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Micro 5.3 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaSUSE:Linux Enterprise Micro 5.3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbSUSE:Linux Enterprise Micro 5.4 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaSUSE:Linux Enterprise Micro 5.4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
sambaSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbopenSUSE:Leap Micro 5.3 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaopenSUSE:Leap Micro 5.3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbopenSUSE:Leap 15.4 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaopenSUSE:Leap 15.4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
sambaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3 Show 45 moreShow less2:4.1.3+dfsg-2ubuntu42:4.1.3+dfsg-2ubuntu52:4.1.6+dfsg-1ubuntu12:4.1.6+dfsg-1ubuntu22:4.1.6+dfsg-1ubuntu2.14.04.12:4.1.6+dfsg-1ubuntu2.14.04.22:4.1.6+dfsg-1ubuntu2.14.04.32:4.1.6+dfsg-1ubuntu2.14.04.42:4.1.6+dfsg-1ubuntu2.14.04.52:4.1.6+dfsg-1ubuntu2.14.04.72:4.1.6+dfsg-1ubuntu2.14.04.82:4.1.6+dfsg-1ubuntu2.14.04.92:4.1.6+dfsg-1ubuntu2.14.04.112:4.1.6+dfsg-1ubuntu2.14.04.122:4.1.6+dfsg-1ubuntu2.14.04.132:4.3.8+dfsg-0ubuntu0.14.04.22:4.3.9+dfsg-0ubuntu0.14.04.12:4.3.9+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.12:4.3.11+dfsg-0ubuntu0.14.04.22:4.3.11+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.42:4.3.11+dfsg-0ubuntu0.14.04.62:4.3.11+dfsg-0ubuntu0.14.04.72:4.3.11+dfsg-0ubuntu0.14.04.82:4.3.11+dfsg-0ubuntu0.14.04.92:4.3.11+dfsg-0ubuntu0.14.04.102:4.3.11+dfsg-0ubuntu0.14.04.112:4.3.11+dfsg-0ubuntu0.14.04.122:4.3.11+dfsg-0ubuntu0.14.04.132:4.3.11+dfsg-0ubuntu0.14.04.142:4.3.11+dfsg-0ubuntu0.14.04.162:4.3.11+dfsg-0ubuntu0.14.04.172:4.3.11+dfsg-0ubuntu0.14.04.192:4.3.11+dfsg-0ubuntu0.14.04.202:4.3.11+dfsg-0ubuntu0.14.04.20+esm12:4.3.11+dfsg-0ubuntu0.14.04.20+esm22:4.3.11+dfsg-0ubuntu0.14.04.20+esm32:4.3.11+dfsg-0ubuntu0.14.04.20+esm42:4.3.11+dfsg-0ubuntu0.14.04.20+esm62:4.3.11+dfsg-0ubuntu0.14.04.20+esm72:4.3.11+dfsg-0ubuntu0.14.04.20+esm82:4.3.11+dfsg-0ubuntu0.14.04.20+esm92:4.3.11+dfsg-0ubuntu0.14.04.20+esm112:4.3.11+dfsg-0ubuntu0.14.04.20+esm12 |
None known |
sambaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2:4.1.17+dfsg-4ubuntu22:4.1.20+dfsg-1ubuntu12:4.1.20+dfsg-1ubuntu22:4.1.20+dfsg-1ubuntu32:4.1.20+dfsg-1ubuntu5 Show 41 moreShow less2:4.3.3+dfsg-1ubuntu12:4.3.3+dfsg-1ubuntu22:4.3.3+dfsg-1ubuntu32:4.3.6+dfsg-1ubuntu12:4.3.8+dfsg-0ubuntu12:4.3.9+dfsg-0ubuntu0.16.04.12:4.3.9+dfsg-0ubuntu0.16.04.22:4.3.9+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.12:4.3.11+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.52:4.3.11+dfsg-0ubuntu0.16.04.62:4.3.11+dfsg-0ubuntu0.16.04.72:4.3.11+dfsg-0ubuntu0.16.04.82:4.3.11+dfsg-0ubuntu0.16.04.92:4.3.11+dfsg-0ubuntu0.16.04.102:4.3.11+dfsg-0ubuntu0.16.04.112:4.3.11+dfsg-0ubuntu0.16.04.122:4.3.11+dfsg-0ubuntu0.16.04.132:4.3.11+dfsg-0ubuntu0.16.04.152:4.3.11+dfsg-0ubuntu0.16.04.162:4.3.11+dfsg-0ubuntu0.16.04.172:4.3.11+dfsg-0ubuntu0.16.04.182:4.3.11+dfsg-0ubuntu0.16.04.192:4.3.11+dfsg-0ubuntu0.16.04.202:4.3.11+dfsg-0ubuntu0.16.04.212:4.3.11+dfsg-0ubuntu0.16.04.232:4.3.11+dfsg-0ubuntu0.16.04.242:4.3.11+dfsg-0ubuntu0.16.04.252:4.3.11+dfsg-0ubuntu0.16.04.262:4.3.11+dfsg-0ubuntu0.16.04.272:4.3.11+dfsg-0ubuntu0.16.04.282:4.3.11+dfsg-0ubuntu0.16.04.292:4.3.11+dfsg-0ubuntu0.16.04.302:4.3.11+dfsg-0ubuntu0.16.04.312:4.3.11+dfsg-0ubuntu0.16.04.322:4.3.11+dfsg-0ubuntu0.16.04.342:4.3.11+dfsg-0ubuntu0.16.04.34+esm12:4.3.11+dfsg-0ubuntu0.16.04.34+esm22:4.3.11+dfsg-0ubuntu0.16.04.34+esm32:4.3.11+dfsg-0ubuntu0.16.04.34+esm4 |
None known |
sambaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2:4.6.7+dfsg-1ubuntu32:4.7.1+dfsg-1ubuntu12:4.7.3+dfsg-1ubuntu12:4.7.4+dfsg-1ubuntu12:4.7.6+dfsg~ubuntu-0ubuntu1 Show 27 moreShow less2:4.7.6+dfsg~ubuntu-0ubuntu22:4.7.6+dfsg~ubuntu-0ubuntu2.22:4.7.6+dfsg~ubuntu-0ubuntu2.42:4.7.6+dfsg~ubuntu-0ubuntu2.52:4.7.6+dfsg~ubuntu-0ubuntu2.62:4.7.6+dfsg~ubuntu-0ubuntu2.72:4.7.6+dfsg~ubuntu-0ubuntu2.92:4.7.6+dfsg~ubuntu-0ubuntu2.102:4.7.6+dfsg~ubuntu-0ubuntu2.112:4.7.6+dfsg~ubuntu-0ubuntu2.132:4.7.6+dfsg~ubuntu-0ubuntu2.142:4.7.6+dfsg~ubuntu-0ubuntu2.152:4.7.6+dfsg~ubuntu-0ubuntu2.162:4.7.6+dfsg~ubuntu-0ubuntu2.172:4.7.6+dfsg~ubuntu-0ubuntu2.182:4.7.6+dfsg~ubuntu-0ubuntu2.192:4.7.6+dfsg~ubuntu-0ubuntu2.202:4.7.6+dfsg~ubuntu-0ubuntu2.212:4.7.6+dfsg~ubuntu-0ubuntu2.232:4.7.6+dfsg~ubuntu-0ubuntu2.242:4.7.6+dfsg~ubuntu-0ubuntu2.262:4.7.6+dfsg~ubuntu-0ubuntu2.272:4.7.6+dfsg~ubuntu-0ubuntu2.282:4.7.6+dfsg~ubuntu-0ubuntu2.292:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm12:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm22:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3 |
None known |
sambaUbuntu:20.04:LTS |
before 2:4.15.13+dfsg-0ubuntu0.20.04.2, plus listed versions 2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4 Show 23 moreShow less2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.1 |
2:4.15.13+dfsg-0ubuntu0.20.04.2 |
sambaUbuntu:22.04:LTS |
before 2:4.15.13+dfsg-0ubuntu1.1, plus listed versions 2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1 Show 7 moreShow less2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu1 |
2:4.15.13+dfsg-0ubuntu1.1 |
sambaUbuntu:20.04:LTS From an advisory covering 2 CVEs |
before 2:4.15.13+dfsg-0ubuntu0.20.04.2, plus listed versions 2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4 Show 23 moreShow less2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.1 |
2:4.15.13+dfsg-0ubuntu0.20.04.2 |
sambaUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 2:4.15.13+dfsg-0ubuntu1.1, plus listed versions 2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1 Show 7 moreShow less2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu1 |
2:4.15.13+dfsg-0ubuntu1.1 |
sambaopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 4.18.1+git.298.4ccf830b2a4-1.1 | 4.18.1+git.298.4ccf830b2a4-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-0922 is a medium vulnerability (CVSS 5.9) in Samba, published March 29, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in samba 4.18.3-1.
References
samba.org/samba/security/CVE-2023-0922.html
security.netapp.com/advisory/ntap-20230406-0007
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S
security.gentoo.org/glsa/202309-06
nvd.nist.gov/vuln/detail/CVE-2023-0922
Show 34 moreShow less
github.com/advisories/GHSA-v9cf-pxq6-w297
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778766810.html
security-tracker.debian.org/tracker/CVE-2023-0922
advisories.mageia.org/MGASA-2023-0127.html
bugs.mageia.org/show_bug.cgi?id=31735
lists.suse.com/pipermail/sle-security-updates/2023-March/014245.html
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1231
suse.com/support/update/announcement/2023/suse-su-20231682-1
bugzilla.suse.com/1209481
ubuntu.com/security/CVE-2023-0922
cve.org/CVERecord?id=CVE-2023-0922
This page doesn't list everything
Left out here: 3 versions. The JSON record has them.