Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 6, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-client-libs-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-common-libs-debuginfoUpgrade python3-samba-develUpgrade samba-common-toolsUpgrade samba-common-tools-debuginfoUpgrade samba-testUpgrade python3-samba-debuginfoUpgrade libwbclient-develUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-usersharesUpgrade samba-client-debuginfoUpgrade samba-commonUpgrade libsmbclient-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade sambaUpgrade samba-winbind-debuginfoUpgrade samba-pidlUpgrade samba-common-libsUpgrade libnetapi-develUpgrade samba-dc-libsUpgrade samba-vfs-iouringUpgrade samba-debuginfoUpgrade samba-test-debuginfoUpgrade samba-test-libsUpgrade samba-libsUpgrade samba-test-libs-debuginfoUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-krb5-printingUpgrade libsmbclient-develUpgrade libsmbclientUpgrade libnetapiUpgrade samba-dc-libs-debuginfoUpgrade libwbclient-debuginfoUpgrade python3-samba-testUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-dcerpcUpgrade samba-winbindUpgrade samba-winbind-modules-debuginfoUpgrade samba-libs-debuginfoUpgrade python3-sambaUpgrade samba-debugsource | Feb 17, 2025 | Dec 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 6, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 6, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade samba-clientUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade sambaUpgrade samba-winbind-clients | May 8, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-client-libsUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-commonUpgrade sambaUpgrade python2-sambaUpgrade ctdbUpgrade samba-winbindUpgrade ctdb-testsUpgrade samba-libsUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-common-libsUpgrade python2-samba-testUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-dc-libsUpgrade libwbclientUpgrade samba-client | Jan 10, 2024 | Mar 6, 2023 |
| Samba | — | Upgrade to Samba version 4.15.13 | Dec 16, 2022 | Dec 16, 2022 |
| Ubuntu | — | Upgrade samba | Jan 25, 2023 | Jan 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub