Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 6, 2023 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libnetapiamazon-linux-2023-upgrade-libnetapi-debuginfoamazon-linux-2023-upgrade-libnetapi-develamazon-linux-2023-upgrade-libsmbclientamazon-linux-2023-upgrade-libsmbclient-debuginfoamazon-linux-2023-upgrade-libsmbclient-develamazon-linux-2023-upgrade-libwbclientamazon-linux-2023-upgrade-libwbclient-debuginfoamazon-linux-2023-upgrade-libwbclient-develamazon-linux-2023-upgrade-python3-sambaamazon-linux-2023-upgrade-python3-samba-debuginfoamazon-linux-2023-upgrade-python3-samba-develamazon-linux-2023-upgrade-python3-samba-testamazon-linux-2023-upgrade-sambaamazon-linux-2023-upgrade-samba-clientamazon-linux-2023-upgrade-samba-client-debuginfoamazon-linux-2023-upgrade-samba-client-libsamazon-linux-2023-upgrade-samba-client-libs-debuginfoamazon-linux-2023-upgrade-samba-commonamazon-linux-2023-upgrade-samba-common-libsamazon-linux-2023-upgrade-samba-common-libs-debuginfoamazon-linux-2023-upgrade-samba-common-toolsamazon-linux-2023-upgrade-samba-common-tools-debuginfoamazon-linux-2023-upgrade-samba-dcerpcamazon-linux-2023-upgrade-samba-dcerpc-debuginfoamazon-linux-2023-upgrade-samba-dc-libsamazon-linux-2023-upgrade-samba-dc-libs-debuginfoamazon-linux-2023-upgrade-samba-debuginfoamazon-linux-2023-upgrade-samba-debugsourceamazon-linux-2023-upgrade-samba-develamazon-linux-2023-upgrade-samba-krb5-printingamazon-linux-2023-upgrade-samba-krb5-printing-debuginfoamazon-linux-2023-upgrade-samba-ldb-ldap-modulesamazon-linux-2023-upgrade-samba-ldb-ldap-modules-debuginfoamazon-linux-2023-upgrade-samba-libsamazon-linux-2023-upgrade-samba-libs-debuginfoamazon-linux-2023-upgrade-samba-pidlamazon-linux-2023-upgrade-samba-testamazon-linux-2023-upgrade-samba-test-debuginfoamazon-linux-2023-upgrade-samba-test-libsamazon-linux-2023-upgrade-samba-test-libs-debuginfoamazon-linux-2023-upgrade-samba-usersharesamazon-linux-2023-upgrade-samba-vfs-iouringamazon-linux-2023-upgrade-samba-vfs-iouring-debuginfoamazon-linux-2023-upgrade-samba-winbindamazon-linux-2023-upgrade-samba-winbind-clientsamazon-linux-2023-upgrade-samba-winbind-clients-debuginfoamazon-linux-2023-upgrade-samba-winbind-debuginfoamazon-linux-2023-upgrade-samba-winbind-krb5-locatoramazon-linux-2023-upgrade-samba-winbind-krb5-locator-debuginfoamazon-linux-2023-upgrade-samba-winbind-modulesamazon-linux-2023-upgrade-samba-winbind-modules-debuginfo | Feb 17, 2025 | Dec 16, 2022 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 6, 2023 | |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 6, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade libwbclientUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade libsmbclientUpgrade sambaUpgrade samba-winbind-modules | May 8, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-libsUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade python3-sambaUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade python2-samba-testUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade python2-sambaUpgrade sambaUpgrade samba-pidlUpgrade samba-libsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade ctdbUpgrade samba-winbindUpgrade ctdb-testsUpgrade samba-client-libsUpgrade python3-samba-test | Jan 10, 2024 | Mar 6, 2023 |
| Samba | — | Upgrade to Samba version 4.15.13 | Dec 16, 2022 | Dec 16, 2022 |
| Ubuntu | ubuntu-upgrade-samba | Jan 25, 2023 | Jan 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub