Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Mar 6, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-pidlUpgrade sambaUpgrade samba-common-libsUpgrade libwbclient-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-test-debuginfoUpgrade libsmbclient-develUpgrade samba-debuginfoUpgrade samba-krb5-printingUpgrade samba-test-libsUpgrade python3-samba-testUpgrade samba-dcerpc-debuginfoUpgrade python3-sambaUpgrade samba-winbindUpgrade samba-vfs-iouring-debuginfoUpgrade libwbclientUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-clientsUpgrade samba-libs-debuginfoUpgrade samba-dcerpcUpgrade libnetapi-develUpgrade libsmbclientUpgrade samba-dc-libs-debuginfoUpgrade libnetapiUpgrade samba-winbind-modulesUpgrade samba-debugsourceUpgrade libsmbclient-debuginfoUpgrade samba-dc-libsUpgrade samba-develUpgrade samba-vfs-iouringUpgrade samba-commonUpgrade samba-libsUpgrade samba-ldb-ldap-modulesUpgrade samba-test-libs-debuginfoUpgrade python3-samba-develUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libwbclient-develUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-client-debuginfoUpgrade samba-usersharesUpgrade samba-common-toolsUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-testUpgrade samba-ldb-ldap-modules-debuginfo | Feb 17, 2025 | Dec 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Mar 6, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Mar 6, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libwbclientUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-commonUpgrade sambaUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade libsmbclientUpgrade samba-winbind | May 8, 2023 | Mar 6, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-common-libsUpgrade python2-samba-testUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-clientUpgrade samba-test-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-winbind-clientsUpgrade python3-sambaUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade python3-samba-testUpgrade samba-commonUpgrade libsmbclientUpgrade sambaUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade samba-winbindUpgrade ctdbUpgrade ctdb-testsUpgrade samba-pidlUpgrade python2-samba | Jan 10, 2024 | Mar 6, 2023 |
| Samba | — | Upgrade to Samba version 4.15.13 | Dec 16, 2022 | Dec 16, 2022 |
| Ubuntu | — | Upgrade samba | Jan 25, 2023 | Jan 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub