A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-dcUpgrade samba-debuginfoUpgrade samba-develUpgrade samba-pidlUpgrade libwbclientUpgrade samba-python-testUpgrade ctdb-testsUpgrade sambaUpgrade ctdbUpgrade samba-commonUpgrade samba-vfs-glusterfsUpgrade samba-testUpgrade samba-pythonUpgrade samba-winbindUpgrade samba-krb5-printingUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-client-libsUpgrade libsmbclient-develUpgrade samba-dc-libsUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-client | Dec 7, 2022 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba412Upgrade samba413 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-clientUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winbind-clients | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-commonUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-winbind-krb5-locatorUpgrade ctdbUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-common-libsUpgrade libsmbclientUpgrade python2-samba-testUpgrade samba-testUpgrade samba-libsUpgrade ctdb-testsUpgrade samba-pidlUpgrade samba-client-libsUpgrade python2-sambaUpgrade samba-winbindUpgrade python3-sambaUpgrade sambaUpgrade libwbclientUpgrade samba-krb5-printing | Oct 11, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-libsUpgrade sambaUpgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-common-tools | Nov 15, 2022 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.14.14Upgrade to Samba version 4.15.9Upgrade to Samba version 4.16.4 | Sep 15, 2022 | Aug 25, 2022 |
| Suse | — | Upgrade samba-libsUpgrade ldb-toolsUpgrade python3-ldbUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0-python3-64bitUpgrade samba-develUpgrade libldb2-32bitUpgrade samba-client-libs-32bitUpgrade samba-dsdb-modulesUpgrade samba-clientUpgrade samba-libs-python3-64bitUpgrade libsamba-policy0-python3Upgrade samba-libs-64bitUpgrade samba-client-32bitUpgrade samba-devel-32bitUpgrade ctdbUpgrade libsamba-policy0-python3-32bitUpgrade samba-testUpgrade sambaUpgrade ctdb-pcp-pmdaUpgrade libldb-develUpgrade samba-libs-python3-32bitUpgrade samba-libs-python3Upgrade libldb2Upgrade samba-winbindUpgrade samba-client-64bitUpgrade samba-winbind-libsUpgrade samba-ad-dcUpgrade libsamba-policy-develUpgrade samba-toolUpgrade samba-libs-32bitUpgrade python3-ldb-develUpgrade samba-ad-dc-libsUpgrade samba-gpupdateUpgrade python3-ldb-32bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-docUpgrade samba-cephUpgrade samba-winbind-libs-32bitUpgrade samba-ldb-ldapUpgrade samba-python3Upgrade samba-client-libs | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub