753 matches found
Slackware Linux 15.0 / current samba Multiple Vulnerabilities (SSA:2022-351-01)
The version of samba installed on the remote host is prior to 4.15.13 / 4.17.4. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-351-01 advisory. - Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022...
CVE-2022-38023
A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between...
Security fix for the ALT Linux 10 package samba version 4.16.8-alt1
Dec. 15, 2022 Evgeny Sinelnikov 4.16.8-alt1 - Update to maintenance release of Samba 4.16 with fixes of the Samba CVE for the Windows Kerberos Elevation of Privilege Vulnerability disclosed by Microsoft on Nov 8 2022 CVE-2022-37967, CVE-2022-37966. - Security fixes: + CVE-2022-37966: A Samba Acti...
RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided
Description This is Samba's response to Microsoft's CVE-2022-3802312. Following RFC8429 and as has been published for CVE-2022-3938, rc4-hmac also known as arcfour-hmac-md5 cryptography in Kerberos is weak, then it follows that the RC4 mode in the NETLOGON Secure Channel DCE/RPC bulk encryption i...
Netlogon Remote Protocol Privilege Escalation
The vulnerability of the Netlogon Remote Protocol MS-NRPC implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability...
AZL-54681 CVE-2022-38023 affecting package samba 4.12.5-7
Netlogon RPC Elevation of Privilege Vulnerability...
ALPINE-CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability...
DEBIAN-CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability...
CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability...
Privilege escalation
Netlogon RPC Elevation of Privilege Vulnerability...
UBUNTU-CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability...
CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability...
CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability...
CVE-2022-38023 Netlogon RPC Elevation of Privilege Vulnerability
...
CVE-2022-38023
CVE-2022-38023 (NetLogon RC4-HMAC vulnerability) affects Samba and related packages (samba, samba-client, libsmbclient, libwbclient, etc.). Technical detail: the issue stems from allowing RC4/HMAC-MD5 in the NetLogon Secure Channel, weakening authentication between clients and servers. Affected p...
CVE-2022-38023: Undefined Security Weakness
Netlogon RPC Elevation of Privilege Vulnerability...
CVE-2022-38023
Netlogon RPC Elevation of Privilege Vulnerability...
