Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 6, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-client-debuginfoUpgrade samba-common-toolsUpgrade samba-usersharesUpgrade samba-common-libs-debuginfoUpgrade samba-clientUpgrade samba-client-libsUpgrade python3-samba-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libwbclient-develUpgrade samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clients-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libnetapi-debuginfoUpgrade python3-samba-develUpgrade samba-client-libs-debuginfoUpgrade libwbclientUpgrade python3-sambaUpgrade samba-libs-debuginfoUpgrade samba-debugsourceUpgrade samba-dc-libsUpgrade libnetapi-develUpgrade samba-winbind-modules-debuginfoUpgrade samba-krb5-printingUpgrade samba-debuginfoUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade samba-test-debuginfoUpgrade samba-libsUpgrade samba-dc-libs-debuginfoUpgrade libsmbclientUpgrade libnetapiUpgrade samba-winbind-modulesUpgrade samba-test-libs-debuginfoUpgrade samba-develUpgrade samba-ldb-ldap-modulesUpgrade samba-commonUpgrade samba-vfs-iouringUpgrade libsmbclient-debuginfoUpgrade sambaUpgrade samba-winbind-debuginfoUpgrade samba-pidlUpgrade samba-winbindUpgrade samba-vfs-iouring-debuginfoUpgrade python3-samba-testUpgrade samba-dcerpc-debuginfoUpgrade samba-dcerpcUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade libwbclient-debuginfo | Feb 17, 2025 | Dec 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 6, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 6, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-clientUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-libsUpgrade samba-winbind | May 8, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python2-sambaUpgrade samba-libsUpgrade samba-pidlUpgrade samba-winbind-modulesUpgrade sambaUpgrade libsmbclientUpgrade samba-client-libsUpgrade ctdbUpgrade samba-commonUpgrade samba-winbindUpgrade ctdb-testsUpgrade python3-samba-testUpgrade samba-krb5-printingUpgrade samba-common-toolsUpgrade libwbclientUpgrade samba-testUpgrade samba-common-libsUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade samba-clientUpgrade python3-samba | Jan 10, 2024 | Mar 6, 2023 |
| Samba | — | Upgrade to Samba version 4.15.13 | Dec 16, 2022 | Dec 16, 2022 |
| Ubuntu | — | Upgrade samba | Jan 25, 2023 | Jan 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub