vulnerability
Amazon Linux 2023: CVE-2022-38023: Important priority package update for samba
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Dec 16, 2022 | Feb 17, 2025 | Jul 4, 2025 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Dec 16, 2022
Added
Feb 17, 2025
Modified
Jul 4, 2025
Description
Netlogon RPC Elevation of Privilege Vulnerability
A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between the samba client and server to craft data with the same MD5 calculation and replace it without being detected.
A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between the samba client and server to craft data with the same MD5 calculation and replace it without being detected.
Solutions
amazon-linux-2023-upgrade-libnetapiamazon-linux-2023-upgrade-libnetapi-debuginfoamazon-linux-2023-upgrade-libnetapi-develamazon-linux-2023-upgrade-libsmbclientamazon-linux-2023-upgrade-libsmbclient-debuginfoamazon-linux-2023-upgrade-libsmbclient-develamazon-linux-2023-upgrade-libwbclientamazon-linux-2023-upgrade-libwbclient-debuginfoamazon-linux-2023-upgrade-libwbclient-develamazon-linux-2023-upgrade-python3-sambaamazon-linux-2023-upgrade-python3-samba-debuginfoamazon-linux-2023-upgrade-python3-samba-develamazon-linux-2023-upgrade-python3-samba-testamazon-linux-2023-upgrade-sambaamazon-linux-2023-upgrade-samba-clientamazon-linux-2023-upgrade-samba-client-debuginfoamazon-linux-2023-upgrade-samba-client-libsamazon-linux-2023-upgrade-samba-client-libs-debuginfoamazon-linux-2023-upgrade-samba-commonamazon-linux-2023-upgrade-samba-common-libsamazon-linux-2023-upgrade-samba-common-libs-debuginfoamazon-linux-2023-upgrade-samba-common-toolsamazon-linux-2023-upgrade-samba-common-tools-debuginfoamazon-linux-2023-upgrade-samba-dcerpcamazon-linux-2023-upgrade-samba-dcerpc-debuginfoamazon-linux-2023-upgrade-samba-dc-libsamazon-linux-2023-upgrade-samba-dc-libs-debuginfoamazon-linux-2023-upgrade-samba-debuginfoamazon-linux-2023-upgrade-samba-debugsourceamazon-linux-2023-upgrade-samba-develamazon-linux-2023-upgrade-samba-krb5-printingamazon-linux-2023-upgrade-samba-krb5-printing-debuginfoamazon-linux-2023-upgrade-samba-ldb-ldap-modulesamazon-linux-2023-upgrade-samba-ldb-ldap-modules-debuginfoamazon-linux-2023-upgrade-samba-libsamazon-linux-2023-upgrade-samba-libs-debuginfoamazon-linux-2023-upgrade-samba-pidlamazon-linux-2023-upgrade-samba-testamazon-linux-2023-upgrade-samba-test-debuginfoamazon-linux-2023-upgrade-samba-test-libsamazon-linux-2023-upgrade-samba-test-libs-debuginfoamazon-linux-2023-upgrade-samba-usersharesamazon-linux-2023-upgrade-samba-vfs-iouringamazon-linux-2023-upgrade-samba-vfs-iouring-debuginfoamazon-linux-2023-upgrade-samba-winbindamazon-linux-2023-upgrade-samba-winbind-clientsamazon-linux-2023-upgrade-samba-winbind-clients-debuginfoamazon-linux-2023-upgrade-samba-winbind-debuginfoamazon-linux-2023-upgrade-samba-winbind-krb5-locatoramazon-linux-2023-upgrade-samba-winbind-krb5-locator-debuginfoamazon-linux-2023-upgrade-samba-winbind-modulesamazon-linux-2023-upgrade-samba-winbind-modules-debuginfo
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.