A flaw was found in Samba. The security vulnerability occurs when KDC and the kpasswd service share a single account and set of keys, allowing them to decrypt each other's tickets. A user who has been requested to change their password, can exploit this flaw to obtain and use tickets to other services.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba412 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-commonUpgrade sambaUpgrade libwbclientUpgrade samba-libs | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-pidlUpgrade samba-clientUpgrade ctdb-testsUpgrade samba-testUpgrade samba-client-libsUpgrade samba-dc-libsUpgrade samba-winbind-modulesUpgrade python2-samba-testUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-libsUpgrade sambaUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade python3-samba-testUpgrade ctdbUpgrade samba-test-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-winbindUpgrade libwbclientUpgrade python2-sambaUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-clients | Oct 11, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-clientUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade sambaUpgrade libwbclientUpgrade samba-commonUpgrade samba-libs | Nov 15, 2022 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.15.9Upgrade to Samba version 4.14.14Upgrade to Samba version 4.16.4 | Jul 29, 2022 | Jul 29, 2022 |
| Suse | — | Upgrade libldb-develUpgrade libsamba-policy0-python3-64bitUpgrade sambaUpgrade samba-ad-dcUpgrade ctdbUpgrade libldb2Upgrade samba-ad-dc-libsUpgrade samba-winbind-libs-32bitUpgrade python3-ldb-32bitUpgrade samba-cephUpgrade libldb2-32bitUpgrade samba-develUpgrade samba-gpupdateUpgrade samba-client-libs-32bitUpgrade samba-libs-32bitUpgrade samba-client-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-libs-python3Upgrade samba-toolUpgrade libsamba-policy0-python3-32bitUpgrade samba-winbindUpgrade samba-client-64bitUpgrade samba-libs-64bitUpgrade samba-clientUpgrade samba-python3Upgrade samba-libs-python3-32bitUpgrade python3-ldbUpgrade samba-ad-dc-libs-32bitUpgrade samba-testUpgrade python3-ldb-develUpgrade samba-client-libsUpgrade samba-libsUpgrade samba-ldb-ldapUpgrade libsamba-policy0-python3Upgrade libsamba-policy-develUpgrade samba-docUpgrade samba-devel-32bitUpgrade ldb-toolsUpgrade samba-libs-python3-64bitUpgrade samba-winbind-libsUpgrade libsamba-policy-python3-develUpgrade samba-dsdb-modules | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub