{"id":"CVE-2022-37966","aliases":["ALPINE-CVE-2022-37966","AZL-54678","CLSA-2026-1788174820","DEBIAN-CVE-2022-37966","EUVD-2022-40573","GHSA-jrg7-vpcv-rf8r","MGASA-2023-0010","OESA-2023-1018","OESA-2023-1019","SUSE-SU-2023:0014-1","SUSE-SU-2023:0122-1","SUSE-SU-2023:0126-1","SUSE-SU-2023:0160-1","SUSE-SU-2023:0163-1","SUSE-SU-2023:0164-1","SUSE-SU-2023:0222-1","SUSE-SU-2023:0620-1","UBUNTU-CVE-2022-37966","USN-5822-1","USN-5936-1","openSUSE-SU-2024:12587-1"],"status":"published","title":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.02936,"percentile":0.87292,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-11-09T00:00:00Z","modified":"2026-11-03T08:03:54Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"samba","fixed_in":["4.15.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"samba","fixed_in":["4.15.13-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ctdb","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-winbind","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-winbind","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libparse-pidl-perl","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient-dev","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient-dev","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient0","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python-samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"registry-tools","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common-bin","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dev","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dsdb-modules","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-libs","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-testsuite","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-vfs-modules","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"smbclient","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"winbind","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.17.4+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.17.4+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.17.4+dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"samba","fixed_in":["4.17.2-5.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"samba","fixed_in":["2:4.15.13+dfsg-0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"samba","fixed_in":["2:4.15.13+dfsg-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.16.0"},{"fixed":"4.15.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.16.0"},{"fixed":"4.15.13-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libparse-pidl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"registry-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dsdb-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-vfs-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"smbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els9"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.17.4+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.17.4+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.17.4+dfsg-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.8-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1.5.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"talloc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"tdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.7-2.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"tevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.3-18.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.2-5.oe2203sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.540.fab3b2a46c6-150300.3.46.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-38.55.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.16+git.384.9fec958bed-3.76.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.591.ab36624310c-150400.3.19.1"}]}],"bundled":11},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.14+git.384.5dc2c21dce-150200.4.44.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.534.0d9f8ece26-3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.534.0d9f8ece26-3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.534.0d9f8ece26-3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.13+git.534.0d9f8ece26-3.77.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.552.fec1a5e57a-150100.3.73.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.13+git.616.557146479a-150200.3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu0.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.17~dfsg-0ubuntu1.20.04.4"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu0.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.4+git.300.305b22bfce-1.1"}]}],"bundled":4}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"microsoft","product":"windows server 2008  service pack 2"},{"vendor":"microsoft","product":"windows server 2008 r2 service pack 1"},{"vendor":"microsoft","product":"windows server 2008 r2 service pack 1 (server core installation)"},{"vendor":"microsoft","product":"windows server 2008 service pack 2"},{"vendor":"microsoft","product":"windows server 2008 service pack 2 (server core installation)"},{"vendor":"microsoft","product":"windows server 2012"},{"vendor":"microsoft","product":"windows server 2012 (server core installation)"},{"vendor":"microsoft","product":"windows server 2012 r2"},{"vendor":"microsoft","product":"windows server 2012 r2 (server core installation)"},{"vendor":"microsoft","product":"windows server 2016"},{"vendor":"microsoft","product":"windows server 2016 (server core installation)"},{"vendor":"microsoft","product":"windows server 2019"},{"vendor":"microsoft","product":"windows server 2019 (server core installation)"},{"vendor":"microsoft","product":"windows server 2022"},{"vendor":"microsoft","product":"windows_server_2008"},{"vendor":"microsoft","product":"windows_server_2012"},{"vendor":"microsoft","product":"windows_server_2016"},{"vendor":"microsoft","product":"windows_server_2019"},{"vendor":"microsoft","product":"windows_server_2022"},{"vendor":"netapp","product":"management_services_for_element_software"},{"vendor":"netapp","product":"management_services_for_netapp_hci"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37966","tags":["vendor-advisory","patch","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202309-06","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37966","tags":["web","advisory"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37966"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VCTYD5EQRS73QZTWPOC2ZO2FL7MMYXMS/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/G2CYDXPFBQES2Z4KLZDILGXFFQ3VIGZ4/"},{"url":"https://security.netapp.com/advisory/ntap-20230110-0003/"},{"url":"https://github.com/advisories/GHSA-jrg7-vpcv-rf8r"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-37966","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1788174820.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-37966","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0010.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30843","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-September/012209.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OO5PL2WBIOJ6AX5KEDZSYH6ILAFYPCOW/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/YOHL3O2H4FYUTUK2D4PURO24UAX3EBPW/","tags":["web"]},{"url":"https://www.samba.org/samba/security/CVE-2022-3437.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-3592.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-42898.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/RWT32WRO3GIUCYYBMM7WJSBXB7UVCOAU/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FXHIAIPMFZWDIVEPCU6MTIM33HSORPOQ/","tags":["web"]},{"url":"https://www.samba.org/samba/security/CVE-2022-38023.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-37966.html","tags":["advisory","report"]},{"url":"https://www.samba.org/samba/security/CVE-2022-37967.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-45141.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VCTYD5EQRS73QZTWPOC2ZO2FL7MMYXMS/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/G2CYDXPFBQES2Z4KLZDILGXFFQ3VIGZ4/","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.15.0.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.0.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.1.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.2.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.3.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.4.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.5.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.6.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.7.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.8.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45141","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1019","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230014-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1205385","tags":["report"]},{"url":"https://bugzilla.suse.com/1205386","tags":["report"]},{"url":"https://bugzilla.suse.com/1205946","tags":["report"]},{"url":"https://bugzilla.suse.com/1206504","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-37967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38023","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230122-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173994","tags":["report"]},{"url":"https://bugzilla.suse.com/1201496","tags":["report"]},{"url":"https://bugzilla.suse.com/1206546","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20251","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32742","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230126-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230160-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1200102","tags":["report"]},{"url":"https://bugzilla.suse.com/1201490","tags":["report"]},{"url":"https://bugzilla.suse.com/1201492","tags":["report"]},{"url":"https://bugzilla.suse.com/1201493","tags":["report"]},{"url":"https://bugzilla.suse.com/1201495","tags":["report"]},{"url":"https://bugzilla.suse.com/1201689","tags":["report"]},{"url":"https://bugzilla.suse.com/1204254","tags":["report"]},{"url":"https://bugzilla.suse.com/1205126","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2031","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-32746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-42898","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230163-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230164-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230222-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230620-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-37966","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5822-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5822-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5936-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-37966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-20251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-42898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-45141","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-44640","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-37966","title":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","status":"published","published":"2022-11-09T00:00:00Z","modified":"2026-08-10T15:11:26.836Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:34:26.977054Z"}],"euvd":[{"id":"EUVD-2022-40573","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","status":"published","published":"2022-11-09T00:00:00Z","modified":"2026-08-10T15:11:26Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C","level":"high"}],"updated_at":"2026-11-02T18:02:04.178454Z"}],"ghsa":[{"id":"GHSA-jrg7-vpcv-rf8r","title":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability.","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability.","status":"published","published":"2022-11-10T12:01:07Z","modified":"2023-03-10T18:30:23Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:54:18.755093Z"}],"nvd":[{"id":"CVE-2022-37966","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","status":"published","published":"2022-11-09T22:15:13.603Z","modified":"2026-08-10T16:18:13.593Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:31.914793Z"}],"osv":[{"id":"ALPINE-CVE-2022-37966","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","status":"published","published":"2022-11-09T22:15:13.603Z","modified":"2026-11-03T07:18:33.497834026Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"CVE-2022-37966","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","status":"published","published":"2022-11-09T22:15:13.603Z","modified":"2026-10-24T10:30:37.43225197Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:26.53798Z"},{"id":"DEBIAN-CVE-2022-37966","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","status":"published","published":"2022-11-09T22:15:13.603Z","modified":"2026-11-03T08:03:54.407740144Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:34.488036Z"},{"id":"OESA-2023-1018","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\r\n\r\nSince the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).(CVE-2022-45141)\r\n\r\nWindows Kerberos RC4-HMAC Elevation of Privilege Vulnerability.(CVE-2022-37966)","status":"published","published":"2023-01-06T11:05:30Z","modified":"2026-08-18T01:17:30.730177348Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1019","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\r\n\r\nWindows Kerberos RC4-HMAC Elevation of Privilege Vulnerability.(CVE-2022-37966)","status":"published","published":"2023-01-06T11:05:30Z","modified":"2026-08-18T01:17:29.374308898Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2022-37966","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","status":"published","published":"2022-11-09T22:15:00Z","modified":"2026-04-22T13:26:56.330032Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"AZL-54678","title":"CVE-2022-37966 affecting package samba 4.12.5-7","description":"Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability","status":"published","published":"2022-11-09T22:15:13Z","modified":"2026-04-21T04:35:39.801948Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"CLSA-2026-1788174820","title":"Fix CVE(s): CVE-2022-37966","description":"   * SECURITY UPDATE: Kerberos KDC elevation of privilege via weak RC4 session\n     keys\n     - debian/patches/CVE-2022-37966.patch: prefer AES over RC4 for Kerberos\n       session keys by selecting the session key from the server's advertised\n       session etypes, strip weak keys from the krbtgt account, leave\n       UF_USE_DES_KEY_ONLY accounts without usable keys as upstream does,\n       declare RC4 support explicitly on trust objects created by samba-tool\n       (upstream 84c28b05a0a), and add \"kdc default domain supported\n       enctypes\", \"kdc supported enctypes\" and \"kdc force enable rc4 weak\n       session keys\" options\n     - debian/patches/CVE-2022-37966.patch: free the newly added sdb_entry\n       etypes/session_etypes members, the calloc'ed etypes-\u003eval array, and\n       the krbtgt keys discarded when the key list is truncated to one\n       (upstream 75a1beeea85, a97aad91878, 149d4364299), avoiding a\n       per-request KDC memory leak\n     - debian/patches/CVE-2022-37966-domain-trust-modify.patch: add the\n       upstream \"samba-tool domain trust modify\" command (upstream d1999c15,\n       same CVE-2022-37966 series) so an administrator has a supported CLI to\n       repair a pre-existing RC4-only trust after the change above stopped\n       assuming RC4 support on trust objects\n     - CVE-2022-37966","status":"published","published":"2026-08-31T11:13:51Z","modified":"2026-10-26T09:32:04.018889983Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"MGASA-2023-0010","title":"Updated samba packages fix security vulnerability","description":"There is a limited write heap buffer overflow in the GSSAPI unwrap_des()\nand unwrap_des3() routines of Heimdal (included in Samba). Some SMB1 write\nrequests were not correctly range checked to ensure the client had sent\nenough data to fulfill the write, allowing server memory contents to be\nwritten into the file (or printer) instead of client supplied data. The\nclient cannot control the area of the server memory that is written to the\nfile (or printer) (CVE-2022-3437)\n\nA symlink following vulnerability was found in Samba, where a user can\ncreate a symbolic link that will make 'smbd' escape the configured share\npath. This flaw allows a remote user with access to the exported part of\nthe file system under a share via SMB1 unix extensions or NFS to create\nsymlinks to files outside the 'smbd' configured share path and gain access\nto another restricted server's filesystem. (CVE-2022-3592)\n\nActive directory elevation of privilege vulnerability (CVE-2022-37966)\n\nActive directory elevation of privilege vulnerability  (CVE-2022-37967)\n\nA flaw was found in samba. The Netlogon RPC implementations may use the\nrc4-hmac encryption algorithm, which is considered weak and should be\navoided even if the client supports more modern encryption types. This\nissue could allow an attacker who knows the plain text content\ncommunicated between the samba client and server to craft data with the\nsame MD5 calculation and replace it without being detected.\n(CVE-2022-38023)\n\nActive directory integer overflow (CVE-2022-42898)\n\nActive directory can be forced to issue weak rc4-hmac encrypted tickets\n(CVE-2022-45141)\n","status":"published","published":"2023-01-24T07:58:24Z","modified":"2026-04-16T04:44:11.647853485Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:12587-1","title":"ctdb-4.17.4+git.300.305b22bfce-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.17.4+git.300.305b22bfce-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:06:08.94948Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0014-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nUpdate to 4.15.13\n\n- CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers (bsc#1205385).\n- CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC (bsc#1205386).\n- CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (bsc#1206504).\n- Fixed issue with bind start up (bsc#1205946).\n","status":"published","published":"2023-01-02T18:06:15Z","modified":"2026-02-04T03:02:30.837918Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0122-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n  Secure channel (bsc#1206504).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n- CVE-2020-14323: Fixed a denial of service in winbindd (bsc#1173994).\n- CVE-2022-32742: Fixed incorrect length check in SMB1write,\n  SMB1write_and_close, SMB1write_and_unlock (bsc#1201496).\n","status":"published","published":"2023-01-23T08:34:37Z","modified":"2025-05-02T04:30:29.993093Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0126-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n  Secure channel (bsc#1206504).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n","status":"published","published":"2023-01-24T12:22:29Z","modified":"2026-02-04T03:46:29.826395Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0160-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n\n- Updated to version 4.15.13:\n  - CVE-2022-37966: Fixed an issue where a weak cipher would be\n    selected to encrypt session keys, which could lead to privilege\n    escalation (bsc#1205385).\n  - CVE-2022-37967: Fixed a potential privilege escalation issue via\n    constrained delegation due to weak a cryptographic algorithm\n    being selected (bsc#1205386).\n  - CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n    Secure channel (bsc#1206504).\n\n- Updated to version 4.15.12:\n  - CVE-2022-42898: Fixed several buffer overflow vulnerabilities on\n  32-bit systems (bsc#1205126).\n\n- Updated to version 4.15.11:\n  - CVE-2022-3437: Fixed a buffer overflow in Heimdal unwrap_des3()\n  (bsc#1204254).\n\n- Updated to version 4.15.10:\n  - Fixed a potential crash due to a concurrency issue (bsc#1200102).\n\n- Updated to version 4.15.9:\n  - CVE-2022-32742: Fixed an information leak that could be triggered\n    via SMB1 (bsc#1201496).\n  - CVE-2022-32746: Fixed a memory corruption issue in database\n    audit logging (bsc#1201490).\n  - CVE-2022-2031: Fixed AD restrictions bypass associated with\n    changing passwords (bsc#1201495).\n  - CVE-2022-32745: Fixed a remote server crash that could be\n    triggered with certain LDAP requests (bsc#1201492).\n  - CVE-2022-32744: Fixed an issue where AD users could have forged\n    password change requests on behalf of other users (bsc#1201493).\n\nOther fixes:\n\n- Fixed a problem when using bind as samba-ad-dc backend related to\n  the named service (bsc#1201689).\n","status":"published","published":"2023-01-26T17:22:47Z","modified":"2026-02-04T03:17:36.805483Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0163-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n  Secure channel (bsc#1206504).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n","status":"published","published":"2023-01-26T17:25:29Z","modified":"2026-02-04T04:30:55.278439Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0164-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n","status":"published","published":"2023-01-26T17:26:11Z","modified":"2026-02-04T03:11:27.686008Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0222-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed an issue where the bad password count would\n  not be properly incremented, which could allow attackers to brute\n  force a user's password (bsc#1206546).\n- CVE-2022-38023: Disabled weak ciphers by default in the Netlogon\n  Secure channel (bsc#1206504).\n- CVE-2022-37966: Fixed an issue where a weak cipher would be\n  selected to encrypt session keys, which could lead to privilege\n  escalation (bsc#1205385).\n","status":"published","published":"2023-02-01T08:35:38Z","modified":"2026-02-04T02:15:34.59186Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0620-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\n- CVE-2021-20251: Fixed bad password count that was not incremented atomically (bsc#1206546).\n- CVE-2022-38023: Fixed weak RC4/HMAC-MD5 NetLogon Secure Channel usage should be avoided (bsc#1206504).\n- CVE-2022-37966: Fixed privilege elevation vulnerability with option 'kerberos encryption types = legacy' which would force RC4-HMAC as a client even if the server supports AES (bsc#1205385).\n","status":"published","published":"2023-03-06T09:54:10Z","modified":"2026-02-04T04:38:08.523111Z","updated_at":"2026-11-02T15:53:52.350754Z"},{"id":"USN-5822-1","title":"samba vulnerabilities","description":"It was discovered that Samba incorrectly handled the bad password count\nlogic. A remote attacker could possibly use this issue to bypass bad\npasswords lockouts. This issue was only addressed in Ubuntu 22.10.\n(CVE-2021-20251)\n\nEvgeny Legerov discovered that Samba incorrectly handled buffers in\ncertain GSSAPI routines of Heimdal. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-3437)\n\nTom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos\nkeys. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-37966, CVE-2022-37967)\n\nIt was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure\nChannel. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-38023)\n\nGreg Hudson discovered that Samba incorrectly handled PAC parsing. On\n32-bit systems, a remote attacker could use this issue to escalate\nprivileges, or possibly execute arbitrary code. (CVE-2022-42898)\n\nJoseph Sutton discovered that Samba could be forced to issue rc4-hmac\nencrypted Kerberos tickets. A remote attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-45141)\n\nWARNING: The fixes included in these updates introduce several important\nbehavior changes which may cause compatibility problems interacting with\nsystems still expecting the former behavior. Please see the following\nupstream advisories for more information:\n\nhttps://www.samba.org/samba/security/CVE-2022-37966.html\nhttps://www.samba.org/samba/security/CVE-2022-37967.html\nhttps://www.samba.org/samba/security/CVE-2022-38023.html\n","status":"published","published":"2023-01-24T12:58:42Z","modified":"2026-04-27T16:32:25.164245112Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5936-1","title":"samba vulnerabilities","description":"Evgeny Legerov discovered that Samba incorrectly handled buffers in\ncertain GSSAPI routines of Heimdal. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-3437)\n\nTom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos\nkeys. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-37966, CVE-2022-37967)\n\nIt was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure\nChannel. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-38023)\n\nGreg Hudson discovered that Samba incorrectly handled PAC parsing. On\n32-bit systems, a remote attacker could use this issue to escalate\nprivileges, or possibly execute arbitrary code. (CVE-2022-42898)\n\nJoseph Sutton discovered that Samba could be forced to issue rc4-hmac\nencrypted Kerberos tickets. A remote attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-45141)\n\nWARNING: This update upgrades the version of Samba to 4.15.13. Please see\nthe upstream release notes for important changes in the new version:\n\nhttps://www.samba.org/samba/history/samba-4.15.0.html\n\nIn addition, the security fixes included in this new version introduce\nseveral important behavior changes which may cause compatibility problems\ninteracting with systems still expecting the former behavior. Please see\nthe following upstream advisories for more information:\n\nhttps://www.samba.org/samba/security/CVE-2022-37966.html\nhttps://www.samba.org/samba/security/CVE-2022-37967.html\nhttps://www.samba.org/samba/security/CVE-2022-38023.html\n","status":"published","published":"2023-03-08T13:02:34Z","modified":"2026-04-27T16:47:21.666650445Z","updated_at":"2026-11-02T16:58:16.738762Z"}]}}