A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-debuginfoUpgrade ctdbUpgrade samba-vfs-glusterfsUpgrade samba-commonUpgrade samba-winbindUpgrade sambaUpgrade samba-testUpgrade samba-dcUpgrade samba-pythonUpgrade samba-python-testUpgrade samba-krb5-printingUpgrade samba-pidlUpgrade libwbclientUpgrade samba-develUpgrade ctdb-testsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-common-libsUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-dc-libsUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-common-toolsUpgrade samba-client-libsUpgrade samba-test-libs | Dec 7, 2022 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba412 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-libsUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade sambaUpgrade samba-winbindUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-clients | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-sambaUpgrade sambaUpgrade samba-winbindUpgrade samba-libsUpgrade python2-sambaUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-pidlUpgrade python2-samba-testUpgrade samba-krb5-printingUpgrade samba-testUpgrade ctdb-testsUpgrade samba-commonUpgrade ctdbUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-dc-libs | Oct 11, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-commonUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libwbclientUpgrade sambaUpgrade samba-libs | Nov 15, 2022 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.14.14Upgrade to Samba version 4.15.9Upgrade to Samba version 4.16.4 | Sep 15, 2022 | Aug 25, 2022 |
| Suse | — | Upgrade ctdbUpgrade libsamba-policy0-python3Upgrade samba-libs-64bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-client-32bitUpgrade samba-testUpgrade samba-libs-python3-64bitUpgrade samba-dsdb-modulesUpgrade samba-devel-32bitUpgrade libsamba-policy0-python3-64bitUpgrade libldb2-32bitUpgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade ldb-toolsUpgrade samba-client-libs-32bitUpgrade samba-develUpgrade python3-ldbUpgrade samba-libsUpgrade samba-python3Upgrade samba-docUpgrade samba-client-64bitUpgrade sambaUpgrade libldb-develUpgrade ctdb-pcp-pmdaUpgrade samba-libs-python3Upgrade libldb2Upgrade samba-winbind-libs-32bitUpgrade samba-winbind-libsUpgrade samba-ldb-ldapUpgrade samba-cephUpgrade python3-ldb-develUpgrade python3-ldb-32bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-toolUpgrade libsamba-policy-develUpgrade samba-gpupdateUpgrade samba-ad-dc-libsUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade samba-ad-dcUpgrade samba-client-libsUpgrade samba-libs-python3-32bit | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub