9.8
Critical
CVE-2022-45141 Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and…
Description
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | Versions not published |
References
- www.samba.org www.samba.org
- GLSA-202309-06 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of samba
The 40 CVEs of samba →
CVE-2023-4154
A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…
7.5
High
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was…
7.7
High
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset…
5.9
Medium
CVE-2023-0225
A flaw was found in Samba
4.3
Medium