{"id":"CVE-2022-45141","aliases":["ALPINE-CVE-2022-45141","AZL-25602","AZL-37018","CLSA-2023-1679000956","CLSA-2023-1685971623","CLSA-2025-1761082525","DEBIAN-CVE-2022-45141","EUVD-2022-48056","GHSA-g5hg-3x62-v52f","MGASA-2023-0010","OESA-2023-1016","OESA-2023-1017","OESA-2023-1018","UBUNTU-CVE-2022-45141","USN-5822-1","USN-5936-1","USN-7582-1"],"status":"published","title":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by...","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00454,"percentile":0.39658,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-326","CWE-327","CWE-328"],"published":"2022-12-16T00:00:00Z","modified":"2026-11-03T08:03:56Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"samba","fixed_in":["4.15.13-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"samba","fixed_in":["4.15.13-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"samba","fixed_in":["4.18.3-1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"ctdb","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss-winbind","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-winbind","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libparse-pidl-perl","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsmbclient","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libsmbclient-dev","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libwbclient-dev","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libwbclient0","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"python-samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"registry-tools","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-common","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-common-bin","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-dev","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-dsdb-modules","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-libs","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-testsuite","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-vfs-modules","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"smbclient","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"winbind","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ctdb","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-winbind","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-winbind","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libparse-pidl-perl","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient-dev","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient-dev","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient0","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"python-samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"registry-tools","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common-bin","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dev","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dsdb-modules","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-libs","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-testsuite","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-vfs-modules","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"smbclient","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"winbind","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"ctdb","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libnss-winbind","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libpam-winbind","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libsmbclient","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libsmbclient-dev","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libwbclient-dev","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"libwbclient0","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"python-samba","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"registry-tools","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-common","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-common-bin","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-dev","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-dsdb-modules","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-libs","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-testsuite","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"samba-vfs-modules","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"smbclient","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"winbind","fixed_in":["2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.16.0+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.16.0+dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.16.0+dfsg-2"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"samba","fixed_in":["4.11.12-24.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"samba","fixed_in":["4.11.12-23.oe1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","fixed_in":["2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","fixed_in":["2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"samba","fixed_in":["2:4.15.13+dfsg-0ubuntu0.20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"samba","fixed_in":["2:4.15.13+dfsg-0ubuntu1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.16.0"},{"fixed":"4.15.13-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.16.0"},{"fixed":"4.15.13-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.3-1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libnss-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libpam-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libparse-pidl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libsmbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwbclient0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"python-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"registry-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-common-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-dsdb-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"samba-vfs-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"smbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libnss-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libpam-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libparse-pidl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libsmbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libwbclient0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"python-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"registry-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-common-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-dsdb-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"samba-vfs-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"smbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"ctdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libnss-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libpam-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libsmbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libwbclient-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"libwbclient0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"python-samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"registry-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-common-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-dsdb-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-testsuite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"samba-vfs-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"smbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5+deb10u5+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.16.0+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.16.0+dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.16.0+dfsg-2"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.2-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.8-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-1.5.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"talloc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.4-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"tdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.7-2.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:8","package":"tevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.12.1-1.mga8"}]}],"bundled":7},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-24.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.12-23.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.3-18.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu0.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.13.17~dfsg-0ubuntu1.20.04.4"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu1"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3"],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.15.13+dfsg-0ubuntu0.20.04.1"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29"],"bundled":4}],"products":[{"vendor":"samba","product":"samba"}],"references":[{"url":"https://www.samba.org/samba/security/CVE-2022-45141.html","tags":["x_transferred","Vendor Advisory","web","advisory","report"]},{"url":"https://security.gentoo.org/glsa/202309-06","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45141","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-g5hg-3x62-v52f"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-45141","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1679000956","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1685971623","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761082525.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/45xxx/CVE-2022-45141.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-45141","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0010.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30843","tags":["report"]},{"url":"https://lists.suse.com/pipermail/sle-security-updates/2022-September/012209.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OO5PL2WBIOJ6AX5KEDZSYH6ILAFYPCOW/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/YOHL3O2H4FYUTUK2D4PURO24UAX3EBPW/","tags":["web"]},{"url":"https://www.samba.org/samba/security/CVE-2022-3437.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-3592.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-42898.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/RWT32WRO3GIUCYYBMM7WJSBXB7UVCOAU/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/FXHIAIPMFZWDIVEPCU6MTIM33HSORPOQ/","tags":["web"]},{"url":"https://www.samba.org/samba/security/CVE-2022-38023.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-37966.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2022-37967.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/VCTYD5EQRS73QZTWPOC2ZO2FL7MMYXMS/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/G2CYDXPFBQES2Z4KLZDILGXFFQ3VIGZ4/","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.15.0.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.0.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.1.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.2.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.3.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.4.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.5.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.6.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.7.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.16.8.html","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1016","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1017","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1018","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37966","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-45141","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5822-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5822-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5936-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-45141","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7582-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-20251","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37966","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-37967","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38023","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-42898","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-34966","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-45141","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2023-03-06T00:00:00Z","modified":"2025-03-06T20:38:07.059Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-328","CWE-326"],"updated_at":"2026-11-02T14:34:31.840191Z"}],"euvd":[{"id":"EUVD-2022-48056","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2023-03-06T00:00:00Z","modified":"2025-03-06T20:38:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:11.059252Z"}],"ghsa":[{"id":"GHSA-g5hg-3x62-v52f","title":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by...","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2023-03-07T00:30:25Z","modified":"2023-09-26T05:03:26Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-326","CWE-327","CWE-328"],"updated_at":"2026-11-02T14:54:46.481792Z"}],"nvd":[{"id":"CVE-2022-45141","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2023-03-06T23:15:11.157Z","modified":"2026-06-17T05:09:26.82Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-328","CWE-326"],"updated_at":"2026-11-02T14:07:36.601381Z"}],"osv":[{"id":"ALPINE-CVE-2022-45141","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2023-03-06T23:15:11.157Z","modified":"2026-11-03T07:18:33.770060873Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"AZL-25602","title":"CVE-2022-45141 affecting package samba 4.12.5-7","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2023-03-06T23:15:11Z","modified":"2026-04-21T04:23:06.602694Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-37018","title":"CVE-2022-45141 affecting package samba for versions less than 4.18.3-1","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2023-03-06T23:15:11Z","modified":"2026-04-21T04:53:54.544214Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:28:04.608733Z"},{"id":"CVE-2022-45141","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2023-03-06T00:00:00Z","modified":"2026-10-28T02:30:26.671279784Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-328"],"updated_at":"2026-11-02T15:44:27.481647Z"},{"id":"DEBIAN-CVE-2022-45141","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2023-03-06T23:15:11.157Z","modified":"2026-11-03T08:03:56.268228216Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:23:34.488036Z"},{"id":"OESA-2023-1016","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\r\n\r\nSince the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).(CVE-2022-45141)","status":"published","published":"2023-01-06T11:05:29Z","modified":"2026-08-18T01:17:29.940276284Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1017","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\r\n\r\nSince the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).(CVE-2022-45141)","status":"published","published":"2023-01-06T11:05:30Z","modified":"2026-08-18T01:17:29.881722615Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"OESA-2023-1018","title":"samba security update","description":"Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\r\n\r\nSince the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).(CVE-2022-45141)\r\n\r\nWindows Kerberos RC4-HMAC Elevation of Privilege Vulnerability.(CVE-2022-37966)","status":"published","published":"2023-01-06T11:05:30Z","modified":"2026-08-18T01:17:30.730177348Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"UBUNTU-CVE-2022-45141","description":"Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).","status":"published","published":"2022-12-16T00:00:00Z","modified":"2026-04-22T13:32:19.539284Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:56.473586Z"},{"id":"CLSA-2023-1679000956","title":"Fix CVE(s): CVE-2022-45141","description":"\n   * SECURITY UPDATE: AD DC can be forced to issue rc4-hmac Kerberos tickets\n     - debian/patches/CVE-2022-45141.patch: fix session key selection algorithm\n       for selecting the ticket in strongest-to-weakest order, thus allowing\n       the target server to select better encryption\n     - CVE-2022-45141","status":"published","published":"2023-03-16T21:09:16Z","modified":"2026-06-04T10:04:22.818865Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2023-1685971623","title":"Fix CVE(s): CVE-2022-45141","description":"\n   * SECURITY UPDATE: Samba AD DC using Heimdal can be forced to issue\n     rc4-hmac encrypted Kerberos tickets\n     - debian/patches/CVE-2022-45141.patch: fix TGS ticket enc-part key\n       selection and check-des\n     - CVE-2022-45141","status":"published","published":"2023-06-05T13:27:08Z","modified":"2026-06-04T10:04:27.817268Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2025-1761082525","title":"Fix CVE(s): CVE-2022-45141","description":"   * SECURITY UPDATE: AD DC can be forced to issue rc4-hmac Kerberos tickets\n   - debian/patches/CVE-2022-45141.patch: fix session key selection algorithm\n     for selecting the ticket in strongest-to-weakest order, thus allowing\n     the target server to select better encryption\n   - CVE-2022-45141","status":"published","published":"2025-10-21T21:35:29Z","modified":"2026-06-04T10:03:42.86173Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"MGASA-2023-0010","title":"Updated samba packages fix security vulnerability","description":"There is a limited write heap buffer overflow in the GSSAPI unwrap_des()\nand unwrap_des3() routines of Heimdal (included in Samba). Some SMB1 write\nrequests were not correctly range checked to ensure the client had sent\nenough data to fulfill the write, allowing server memory contents to be\nwritten into the file (or printer) instead of client supplied data. The\nclient cannot control the area of the server memory that is written to the\nfile (or printer) (CVE-2022-3437)\n\nA symlink following vulnerability was found in Samba, where a user can\ncreate a symbolic link that will make 'smbd' escape the configured share\npath. This flaw allows a remote user with access to the exported part of\nthe file system under a share via SMB1 unix extensions or NFS to create\nsymlinks to files outside the 'smbd' configured share path and gain access\nto another restricted server's filesystem. (CVE-2022-3592)\n\nActive directory elevation of privilege vulnerability (CVE-2022-37966)\n\nActive directory elevation of privilege vulnerability  (CVE-2022-37967)\n\nA flaw was found in samba. The Netlogon RPC implementations may use the\nrc4-hmac encryption algorithm, which is considered weak and should be\navoided even if the client supports more modern encryption types. This\nissue could allow an attacker who knows the plain text content\ncommunicated between the samba client and server to craft data with the\nsame MD5 calculation and replace it without being detected.\n(CVE-2022-38023)\n\nActive directory integer overflow (CVE-2022-42898)\n\nActive directory can be forced to issue weak rc4-hmac encrypted tickets\n(CVE-2022-45141)\n","status":"published","published":"2023-01-24T07:58:24Z","modified":"2026-04-16T04:44:11.647853485Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"USN-5822-1","title":"samba vulnerabilities","description":"It was discovered that Samba incorrectly handled the bad password count\nlogic. A remote attacker could possibly use this issue to bypass bad\npasswords lockouts. This issue was only addressed in Ubuntu 22.10.\n(CVE-2021-20251)\n\nEvgeny Legerov discovered that Samba incorrectly handled buffers in\ncertain GSSAPI routines of Heimdal. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-3437)\n\nTom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos\nkeys. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-37966, CVE-2022-37967)\n\nIt was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure\nChannel. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-38023)\n\nGreg Hudson discovered that Samba incorrectly handled PAC parsing. On\n32-bit systems, a remote attacker could use this issue to escalate\nprivileges, or possibly execute arbitrary code. (CVE-2022-42898)\n\nJoseph Sutton discovered that Samba could be forced to issue rc4-hmac\nencrypted Kerberos tickets. A remote attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-45141)\n\nWARNING: The fixes included in these updates introduce several important\nbehavior changes which may cause compatibility problems interacting with\nsystems still expecting the former behavior. Please see the following\nupstream advisories for more information:\n\nhttps://www.samba.org/samba/security/CVE-2022-37966.html\nhttps://www.samba.org/samba/security/CVE-2022-37967.html\nhttps://www.samba.org/samba/security/CVE-2022-38023.html\n","status":"published","published":"2023-01-24T12:58:42Z","modified":"2026-04-27T16:32:25.164245112Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-5936-1","title":"samba vulnerabilities","description":"Evgeny Legerov discovered that Samba incorrectly handled buffers in\ncertain GSSAPI routines of Heimdal. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-3437)\n\nTom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos\nkeys. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-37966, CVE-2022-37967)\n\nIt was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure\nChannel. A remote attacker could possibly use this issue to elevate\nprivileges. (CVE-2022-38023)\n\nGreg Hudson discovered that Samba incorrectly handled PAC parsing. On\n32-bit systems, a remote attacker could use this issue to escalate\nprivileges, or possibly execute arbitrary code. (CVE-2022-42898)\n\nJoseph Sutton discovered that Samba could be forced to issue rc4-hmac\nencrypted Kerberos tickets. A remote attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-45141)\n\nWARNING: This update upgrades the version of Samba to 4.15.13. Please see\nthe upstream release notes for important changes in the new version:\n\nhttps://www.samba.org/samba/history/samba-4.15.0.html\n\nIn addition, the security fixes included in this new version introduce\nseveral important behavior changes which may cause compatibility problems\ninteracting with systems still expecting the former behavior. Please see\nthe following upstream advisories for more information:\n\nhttps://www.samba.org/samba/security/CVE-2022-37966.html\nhttps://www.samba.org/samba/security/CVE-2022-37967.html\nhttps://www.samba.org/samba/security/CVE-2022-38023.html\n","status":"published","published":"2023-03-08T13:02:34Z","modified":"2026-04-27T16:47:21.666650445Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-7582-1","title":"samba vulnerabilities","description":"Evgeny Legerov discovered that Samba incorrectly handled buffers in\ncertain GSSAPI routines of Heimdal. A remote attacker could possibly use\nthis issue to cause Samba to crash, resulting in a denial of service.\n(CVE-2022-3437)\n\nGreg Hudson discovered that Samba incorrectly handled PAC parsing. On\n32-bit systems, a remote attacker could use this issue to escalate\nprivileges, or possibly execute arbitrary code. (CVE-2022-42898)\n\nJoseph Sutton discovered that Samba could be forced to issue rc4-hmac\nencrypted Kerberos tickets. A remote attacker could possibly use this issue\nto escalate privileges. This issue only affected Ubuntu 20.04 LTS and\nUbuntu 22.04 LTS. (CVE-2022-45141)\n\nFlorent Saudel discovered that Samba incorrectly handled certain Spotlight\nrequests. A remote attacker could possibly use this issue to cause Samba to\nconsume resources, leading to a denial of service. (CVE-2023-34966)\n","status":"published","published":"2025-06-19T10:33:58Z","modified":"2026-06-25T13:32:30.593559878Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}