Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 6, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-winbindUpgrade samba-ldb-ldap-modulesUpgrade samba-krb5-printingUpgrade samba-debugsourceUpgrade samba-libs-debuginfoUpgrade python3-sambaUpgrade samba-common-libsUpgrade libwbclient-debuginfoUpgrade samba-vfs-iouringUpgrade libsmbclient-develUpgrade samba-debuginfoUpgrade samba-dcerpcUpgrade libwbclientUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade samba-test-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade libsmbclientUpgrade samba-develUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-dc-libsUpgrade libnetapiUpgrade samba-libsUpgrade samba-test-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbind-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade sambaUpgrade samba-pidlUpgrade libnetapi-develUpgrade libsmbclient-debuginfoUpgrade samba-commonUpgrade samba-test-libsUpgrade samba-common-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libwbclient-develUpgrade samba-common-toolsUpgrade python3-samba-debuginfoUpgrade samba-usersharesUpgrade libnetapi-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-client-libsUpgrade samba-client | Feb 17, 2025 | Dec 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 6, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 6, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-common-toolsUpgrade libwbclientUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade sambaUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbind | May 8, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-libsUpgrade samba-test-libsUpgrade samba-testUpgrade samba-clientUpgrade samba-krb5-printingUpgrade python3-sambaUpgrade samba-winbind-krb5-locatorUpgrade python2-samba-testUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-commonUpgrade samba-client-libsUpgrade libsmbclientUpgrade python3-samba-testUpgrade samba-winbindUpgrade ctdbUpgrade samba-pidlUpgrade samba-libsUpgrade ctdb-testsUpgrade sambaUpgrade python2-sambaUpgrade samba-winbind-modules | Jan 10, 2024 | Mar 6, 2023 |
| Samba | — | Upgrade to Samba version 4.15.13 | Dec 16, 2022 | Dec 16, 2022 |
| Ubuntu | — | Upgrade samba | Jan 25, 2023 | Jan 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub