A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Aug 25, 2022 |
| Amazon Linux Ami 2 | — | Upgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade samba-client-libsUpgrade libwbclient-develUpgrade samba-libsUpgrade samba-test-libsUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade libsmbclientUpgrade samba-debuginfoUpgrade samba-python-testUpgrade sambaUpgrade samba-vfs-glusterfsUpgrade samba-winbindUpgrade samba-testUpgrade samba-pythonUpgrade samba-krb5-printingUpgrade samba-develUpgrade libwbclientUpgrade samba-dcUpgrade samba-pidlUpgrade ctdbUpgrade ctdb-testsUpgrade samba-common | Dec 7, 2022 | Aug 25, 2022 |
| Amazon_linux | — | Upgrade samba | Dec 10, 2022 | Jul 29, 2022 |
| Debian | — | Upgrade samba | Nov 4, 2022 | Aug 25, 2022 |
| Freebsd | — | Upgrade samba412Upgrade samba413 | Nov 4, 2022 | Oct 11, 2022 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade samba-winbindUpgrade libsmbclientUpgrade samba-common-toolsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade libwbclientUpgrade samba-libs | Nov 3, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade libsmbclientUpgrade samba-clientUpgrade ctdbUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade python3-sambaUpgrade libwbclientUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-client-libsUpgrade python2-sambaUpgrade sambaUpgrade ctdb-testsUpgrade python2-samba-testUpgrade samba-krb5-printingUpgrade samba-testUpgrade samba-libs | Oct 11, 2022 | Aug 25, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-libsUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade samba-common-toolsUpgrade libwbclient | Nov 15, 2022 | Aug 25, 2022 |
| Samba | — | Upgrade to Samba version 4.16.4Upgrade to Samba version 4.14.14Upgrade to Samba version 4.15.9 | Sep 15, 2022 | Aug 25, 2022 |
| Suse | — | Upgrade samba-python3Upgrade samba-docUpgrade samba-ad-dc-libsUpgrade samba-ldb-ldapUpgrade samba-gpupdateUpgrade ctdb-pcp-pmdaUpgrade samba-winbind-libsUpgrade samba-client-libsUpgrade sambaUpgrade libldb-develUpgrade samba-ad-dc-libs-32bitUpgrade libldb2Upgrade samba-client-64bitUpgrade samba-libs-python3-32bitUpgrade samba-winbind-libs-32bitUpgrade samba-libs-python3Upgrade libsamba-policy-develUpgrade samba-toolUpgrade python3-ldb-32bitUpgrade samba-cephUpgrade samba-libs-32bitUpgrade samba-winbindUpgrade python3-ldb-develUpgrade samba-ad-dcUpgrade ldb-toolsUpgrade samba-dsdb-modulesUpgrade samba-libsUpgrade libsamba-policy0-python3-32bitUpgrade ctdbUpgrade libsamba-policy0-python3Upgrade samba-libs-python3-64bitUpgrade libsamba-policy0-python3-64bitUpgrade samba-client-libs-32bitUpgrade libsamba-policy-python3-develUpgrade samba-devel-32bitUpgrade samba-testUpgrade samba-libs-64bitUpgrade samba-client-32bitUpgrade libldb2-32bitUpgrade samba-clientUpgrade samba-develUpgrade python3-ldb | Oct 26, 2022 | Aug 25, 2022 |
| Ubuntu | — | Upgrade samba | Aug 2, 2022 | Jul 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub