p PatchFirst

CVE-2022-45141

CVE-2022-45141

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

CVSS 9.8 · Critical · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • samba

    Versions
    • Fixed in samba 4.15.13, samba 4.16.8, samba 4.15.13: Affected

    No fix published

  • samba Debian:12

    Affected ranges
    • ECOSYSTEM: < 2:4.16.0+dfsg-2

    Update to 2:4.16.0+dfsg-2

  • samba Debian:13

    Affected ranges
    • ECOSYSTEM: < 2:4.16.0+dfsg-2

    Update to 2:4.16.0+dfsg-2

  • samba Debian:14

    Affected ranges
    • ECOSYSTEM: < 2:4.16.0+dfsg-2

    Update to 2:4.16.0+dfsg-2

  • samba Ubuntu:Pro:16.04:LTS

    Versions
    • 2:4.1.17+dfsg-4ubuntu2
    • 2:4.1.20+dfsg-1ubuntu1
    • 2:4.1.20+dfsg-1ubuntu2
    • 2:4.1.20+dfsg-1ubuntu3
    • 2:4.1.20+dfsg-1ubuntu5
    • 2:4.3.3+dfsg-1ubuntu1
    • 2:4.3.3+dfsg-1ubuntu2
    • 2:4.3.3+dfsg-1ubuntu3
    • 2:4.3.6+dfsg-1ubuntu1
    • 2:4.3.8+dfsg-0ubuntu1
    • 2:4.3.9+dfsg-0ubuntu0.16.04.1
    • 2:4.3.9+dfsg-0ubuntu0.16.04.2
    • 2:4.3.9+dfsg-0ubuntu0.16.04.3
    • 2:4.3.11+dfsg-0ubuntu0.16.04.1
    • 2:4.3.11+dfsg-0ubuntu0.16.04.3
    • 2:4.3.11+dfsg-0ubuntu0.16.04.5
    • 2:4.3.11+dfsg-0ubuntu0.16.04.6
    • 2:4.3.11+dfsg-0ubuntu0.16.04.7
    • 2:4.3.11+dfsg-0ubuntu0.16.04.8
    • 2:4.3.11+dfsg-0ubuntu0.16.04.9
    • 2:4.3.11+dfsg-0ubuntu0.16.04.10
    • 2:4.3.11+dfsg-0ubuntu0.16.04.11
    • 2:4.3.11+dfsg-0ubuntu0.16.04.12
    • 2:4.3.11+dfsg-0ubuntu0.16.04.13
    • 2:4.3.11+dfsg-0ubuntu0.16.04.15
    • 2:4.3.11+dfsg-0ubuntu0.16.04.16
    • 2:4.3.11+dfsg-0ubuntu0.16.04.17
    • 2:4.3.11+dfsg-0ubuntu0.16.04.18
    • 2:4.3.11+dfsg-0ubuntu0.16.04.19
    • 2:4.3.11+dfsg-0ubuntu0.16.04.20
    • 2:4.3.11+dfsg-0ubuntu0.16.04.21
    • 2:4.3.11+dfsg-0ubuntu0.16.04.23
    • 2:4.3.11+dfsg-0ubuntu0.16.04.24
    • 2:4.3.11+dfsg-0ubuntu0.16.04.25
    • 2:4.3.11+dfsg-0ubuntu0.16.04.26
    • 2:4.3.11+dfsg-0ubuntu0.16.04.27
    • 2:4.3.11+dfsg-0ubuntu0.16.04.28
    • 2:4.3.11+dfsg-0ubuntu0.16.04.29
    • 2:4.3.11+dfsg-0ubuntu0.16.04.30
    • 2:4.3.11+dfsg-0ubuntu0.16.04.31
    • 2:4.3.11+dfsg-0ubuntu0.16.04.32
    • 2:4.3.11+dfsg-0ubuntu0.16.04.34
    • 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1
    Affected ranges
    • ECOSYSTEM: < 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2

    Update to 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2

  • samba Ubuntu:Pro:18.04:LTS

    Versions
    • 2:4.6.7+dfsg-1ubuntu3
    • 2:4.7.1+dfsg-1ubuntu1
    • 2:4.7.3+dfsg-1ubuntu1
    • 2:4.7.4+dfsg-1ubuntu1
    • 2:4.7.6+dfsg~ubuntu-0ubuntu1
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.2
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.4
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.5
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.6
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.7
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.9
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.10
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.11
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.13
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.14
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.15
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.16
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.17
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.18
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.19
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.20
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.21
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.23
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.24
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.26
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.27
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.28
    • 2:4.7.6+dfsg~ubuntu-0ubuntu2.29
    Affected ranges
    • ECOSYSTEM: < 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1

    Update to 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1

  • samba Ubuntu:20.04:LTS

    Versions
    • 2:4.10.7+dfsg-0ubuntu2
    • 2:4.10.7+dfsg-0ubuntu3
    • 2:4.11.1+dfsg-3ubuntu1
    • 2:4.11.1+dfsg-3ubuntu2
    • 2:4.11.1+dfsg-3ubuntu4
    • 2:4.11.5+dfsg-1ubuntu1
    • 2:4.11.5+dfsg-1ubuntu2
    • 2:4.11.6+dfsg-0ubuntu1
    • 2:4.11.6+dfsg-0ubuntu1.1
    • 2:4.11.6+dfsg-0ubuntu1.2
    • 2:4.11.6+dfsg-0ubuntu1.3
    • 2:4.11.6+dfsg-0ubuntu1.4
    • 2:4.11.6+dfsg-0ubuntu1.5
    • 2:4.11.6+dfsg-0ubuntu1.6
    • 2:4.11.6+dfsg-0ubuntu1.8
    • 2:4.11.6+dfsg-0ubuntu1.9
    • 2:4.11.6+dfsg-0ubuntu1.10
    • 2:4.13.14+dfsg-0ubuntu0.20.04.1
    • 2:4.13.14+dfsg-0ubuntu0.20.04.2
    • 2:4.13.14+dfsg-0ubuntu0.20.04.3
    • 2:4.13.14+dfsg-0ubuntu0.20.04.4
    • 2:4.13.17~dfsg-0ubuntu0.21.04.1
    • 2:4.13.17~dfsg-0ubuntu0.21.04.2
    • 2:4.13.17~dfsg-0ubuntu1.20.04.1
    • 2:4.13.17~dfsg-0ubuntu1.20.04.2
    • 2:4.13.17~dfsg-0ubuntu1.20.04.4
    • 2:4.13.17~dfsg-0ubuntu1.20.04.5
    Affected ranges
    • ECOSYSTEM: < 2:4.15.13+dfsg-0ubuntu0.20.04.1

    Update to 2:4.15.13+dfsg-0ubuntu0.20.04.1

  • samba Ubuntu:22.04:LTS

    Versions
    • 2:4.13.5+dfsg-2ubuntu2
    • 2:4.13.5+dfsg-2ubuntu3
    • 2:4.13.14+dfsg-0ubuntu1
    • 2:4.13.14+dfsg-0ubuntu2
    • 2:4.15.5~dfsg-0ubuntu1
    • 2:4.15.5~dfsg-0ubuntu2
    • 2:4.15.5~dfsg-0ubuntu4
    • 2:4.15.5~dfsg-0ubuntu5
    • 2:4.15.5~dfsg-0ubuntu5.1
    • 2:4.15.9+dfsg-0ubuntu0.2
    • 2:4.15.9+dfsg-0ubuntu0.3
    Affected ranges
    • ECOSYSTEM: < 2:4.15.13+dfsg-0ubuntu1

    Update to 2:4.15.13+dfsg-0ubuntu1

Original sources

Check your server →