Lucene search
GoogleOSV:ALSA-2023:0838HistoryFeb 21, 2023 - 12:00 a.m.
Important: samba security update
2023-02-2100:00:00
Google
osv.dev
29
samba
security update
smb protocol
cifs protocol
weak rc4
hmac-md5 netlogon
cve-2022-38023
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.013
Percentile
86.3%
Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.
Security Fix(es):
- samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
nessus
nessus
AlmaLinux 9 : samba (ALSA-2023:2127)
2023-05-05 00:00:00
EulerOS Virtualization 2.10.0 : samba (EulerOS-SA-2023-2492)
2023-07-28 00:00:00
RHEL 8 : samba (RHSA-2023:0637)
2023-02-07 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-1811)
2023-05-09 00:00:00
Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2023-2492)
2023-07-31 00:00:00
CentOS: Security Advisory for ctdb (CESA-2023:1090)
2023-03-09 00:00:00
prion
prion
Privilege escalation
2022-11-09 22:15:00
ubuntucve
ubuntucve
CVE-2022-38023
2022-11-09 00:00:00
CVE-2022-37966
2022-11-09 00:00:00
amazon
amazon
Important: samba
2023-05-11 18:00:00
Important: samba
2023-05-11 17:49:00
cve
cve
CVE-2022-38023
2022-11-09 22:15:16
redhat
redhat
(RHSA-2023:2136) Important: samba security update
2023-05-04 18:15:19
(RHSA-2023:0637) Important: samba security update
2023-02-07 21:15:49
(RHSA-2023:0639) Important: samba security update
2023-02-07 22:09:25
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2023-03-08 16:28:01
almalinux
almalinux
Important: samba security update
2023-02-21 00:00:00
Important: samba security update
2023-05-04 00:00:00
rocky
rocky
samba security update
2023-05-05 15:41:05
samba security update
2023-02-22 01:08:44
osv
osv
Important: samba security update
2023-05-05 15:41:05
CVE-2022-38023
2022-11-09 22:15:16
Important: samba security update
2023-05-04 00:00:00
debiancve
debiancve
CVE-2022-38023
2022-11-09 22:15:16
oraclelinux
oraclelinux
samba security update
2023-05-04 00:00:00
samba security update
2023-02-22 00:00:00
samba security update
2023-03-08 00:00:00
redhatcve
redhatcve
CVE-2022-38023
2022-12-16 18:05:00
cvelist
cvelist
CVE-2022-38023 Netlogon RPC Elevation of Privilege Vulnerability
2022-11-09 00:00:00
alpinelinux
alpinelinux
CVE-2022-38023
2022-11-09 22:15:16
nvd
nvd
CVE-2022-38023
2022-11-09 22:15:16
veracode
veracode
Privilege Escalation
2023-01-06 11:13:34
mscve
mscve
Netlogon RPC Elevation of Privilege Vulnerability
2022-11-08 08:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.16.9-alt1
2023-03-02 00:00:00
Security fix for the ALT Linux 10 package samba version 4.16.8-alt1
2022-12-15 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: samba-4.17.4-0.fc37
2022-12-19 01:18:39
[SECURITY] Fedora 36 Update: samba-4.16.8-0.fc36
2022-12-21 01:19:35
samba
samba
RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
2022-12-15 00:00:00
slackware
slackware
[slackware-security] samba
2022-12-17 21:30:27
cisa
cisa
Samba Releases Security Updates
2022-12-16 00:00:00
thn
thn
ubuntu
ubuntu
Samba vulnerabilities
2023-03-08 00:00:00
Samba vulnerabilities
2023-01-24 00:00:00
Samba regression
2023-01-26 00:00:00
mageia
mageia
Updated samba packages fix security vulnerability
2023-01-24 10:58:24
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-05-31 17:23:24
Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs
2023-05-31 17:22:48
avleonov
avleonov
mskb
mskb
November 8, 2022—KB5020005 (Security-only update)
2022-11-08 08:00:00
November 8, 2022—KB5020019 (Monthly Rollup)
2022-11-08 08:00:00
November 8, 2022—KB5020009 (Monthly Rollup)
2023-01-26 08:00:00
qualysblog
qualysblog
kaspersky
kaspersky
KLA20045 Multiple vulnerabilities in Microsoft Products (ESU)
2022-11-08 00:00:00
KLA20047 Multiple vulnerabilities in Microsoft Windows
2022-11-08 00:00:00
gentoo
gentoo
Samba: Multiple Vulnerabilities
2023-09-17 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0603
2023-06-26 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - November 2022
2022-11-08 20:02:57
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
8.1
Confidence
High
EPSS
0.013
Percentile
86.3%
Related for OSV:ALSA-2023:0838