Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 6, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-dc-libs-debuginfoUpgrade samba-develUpgrade libnetapi-develUpgrade python3-sambaUpgrade samba-dc-libsUpgrade samba-winbind-modules-debuginfoUpgrade libnetapiUpgrade libsmbclientUpgrade samba-debugsourceUpgrade samba-libsUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-libs-debuginfoUpgrade samba-test-libsUpgrade samba-test-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-debuginfoUpgrade libsmbclient-develUpgrade samba-krb5-printingUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade samba-pidlUpgrade sambaUpgrade samba-winbind-debuginfoUpgrade python3-samba-testUpgrade samba-dcerpcUpgrade libwbclient-debuginfoUpgrade samba-vfs-iouringUpgrade samba-common-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-commonUpgrade samba-winbindUpgrade libsmbclient-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-common-toolsUpgrade libwbclient-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-testUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-usersharesUpgrade samba-client-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-tools-debuginfoUpgrade python3-samba-develUpgrade libnetapi-debuginfoUpgrade samba-client-libs-debuginfoUpgrade python3-samba-debuginfo | Feb 17, 2025 | Dec 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 6, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 6, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-common-toolsUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbindUpgrade sambaUpgrade samba-winbind-modules | May 8, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-samba-testUpgrade samba-client-libsUpgrade python2-sambaUpgrade sambaUpgrade ctdbUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade samba-pidlUpgrade ctdb-testsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade libwbclientUpgrade python2-samba-test | Jan 10, 2024 | Mar 6, 2023 |
| Samba | — | Upgrade to Samba version 4.15.13 | Dec 16, 2022 | Dec 16, 2022 |
| Ubuntu | — | Upgrade samba | Jan 25, 2023 | Jan 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub