A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-debuginfoUpgrade samba-testUpgrade ctdbUpgrade samba-python-testUpgrade samba-pidlUpgrade samba-dcUpgrade samba-vfs-glusterfsUpgrade samba-pythonUpgrade samba-krb5-printingUpgrade libwbclientUpgrade samba-develUpgrade samba-winbindUpgrade sambaUpgrade samba-commonUpgrade ctdb-testsUpgrade samba-libsUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-develUpgrade libsmbclientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-client-libs | Dec 7, 2022 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba413Upgrade samba412 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade sambaUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade libwbclient | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbindUpgrade libwbclientUpgrade samba-testUpgrade samba-krb5-printingUpgrade python2-samba-testUpgrade sambaUpgrade python2-sambaUpgrade samba-pidlUpgrade ctdb-testsUpgrade samba-libsUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-winbind-clientsUpgrade samba-dc-libsUpgrade samba-commonUpgrade python3-samba-testUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade ctdbUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-test-libs | Oct 11, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade sambaUpgrade libwbclientUpgrade samba-libsUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-winbind-clients | Nov 15, 2022 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.15.9Upgrade to Samba version 4.14.14Upgrade to Samba version 4.16.4 | Sep 15, 2022 | Aug 25, 2022 |
| Suse | — | Upgrade samba-ldb-ldapUpgrade samba-client-64bitUpgrade samba-winbindUpgrade samba-winbind-libs-32bitUpgrade libldb2Upgrade samba-libs-python3Upgrade samba-client-libsUpgrade samba-winbind-libsUpgrade sambaUpgrade libsamba-policy-develUpgrade samba-cephUpgrade python3-ldb-develUpgrade samba-ad-dc-libsUpgrade samba-ad-dc-libs-32bitUpgrade python3-ldb-32bitUpgrade samba-gpupdateUpgrade samba-ad-dcUpgrade samba-docUpgrade samba-toolUpgrade samba-libs-32bitUpgrade libldb-develUpgrade samba-python3Upgrade samba-libs-python3-32bitUpgrade ctdb-pcp-pmdaUpgrade libldb2-32bitUpgrade samba-client-32bitUpgrade libsamba-policy-python3-develUpgrade libsamba-policy0-python3-64bitUpgrade samba-clientUpgrade libsamba-policy0-python3Upgrade ctdbUpgrade samba-client-libs-32bitUpgrade samba-libs-python3-64bitUpgrade samba-develUpgrade libsamba-policy0-python3-32bitUpgrade samba-dsdb-modulesUpgrade samba-libs-64bitUpgrade samba-devel-32bitUpgrade python3-ldbUpgrade ldb-toolsUpgrade samba-libsUpgrade samba-test | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub