A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-common-libsUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-develUpgrade samba-krb5-printingUpgrade samba-pythonUpgrade samba-winbindUpgrade libwbclientUpgrade samba-dcUpgrade ctdb-testsUpgrade ctdbUpgrade samba-commonUpgrade samba-testUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade samba-python-testUpgrade samba-debuginfoUpgrade samba-pidl | Dec 7, 2022 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba412Upgrade samba413 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade libwbclientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-commonUpgrade samba-winbindUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-winbind-clients | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-libsUpgrade samba-testUpgrade ctdb-testsUpgrade python3-sambaUpgrade python2-samba-testUpgrade samba-pidlUpgrade samba-krb5-printingUpgrade libwbclientUpgrade python2-sambaUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-clientUpgrade ctdbUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-modulesUpgrade samba-test-libsUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade python3-samba-test | Oct 11, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-winbind-modulesUpgrade samba-commonUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-clientUpgrade sambaUpgrade samba-libsUpgrade libwbclientUpgrade samba-winbind | Nov 15, 2022 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.14.14Upgrade to Samba version 4.15.9Upgrade to Samba version 4.16.4 | Sep 15, 2022 | Aug 25, 2022 |
| Suse | — | Upgrade samba-libs-64bitUpgrade libsamba-policy-python3-develUpgrade samba-libs-python3-64bitUpgrade samba-client-libs-32bitUpgrade samba-testUpgrade libldb2-32bitUpgrade samba-develUpgrade samba-dsdb-modulesUpgrade libsamba-policy0-python3-64bitUpgrade samba-client-32bitUpgrade ctdbUpgrade samba-libsUpgrade libsamba-policy0-python3-32bitUpgrade samba-devel-32bitUpgrade libsamba-policy0-python3Upgrade python3-ldbUpgrade ldb-toolsUpgrade samba-clientUpgrade samba-ad-dc-libs-32bitUpgrade samba-cephUpgrade samba-docUpgrade python3-ldb-32bitUpgrade libsamba-policy-develUpgrade python3-ldb-develUpgrade samba-winbind-libsUpgrade libldb-develUpgrade samba-ad-dcUpgrade samba-libs-python3-32bitUpgrade samba-libs-python3Upgrade ctdb-pcp-pmdaUpgrade samba-libs-32bitUpgrade samba-client-libsUpgrade samba-toolUpgrade samba-python3Upgrade samba-ldb-ldapUpgrade samba-gpupdateUpgrade libldb2Upgrade sambaUpgrade samba-winbind-libs-32bitUpgrade samba-client-64bitUpgrade samba-winbindUpgrade samba-ad-dc-libs | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub