CVE-2020-14323 affecting package samba for versions less than 4.18.3-1

CVE-2020-14323 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-3437 affecting package samba for versions less than 4.18.3-1

CVE-2022-3437 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32742 affecting package samba for versions less than 4.18.3-1

CVE-2022-32742 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-3738 affecting package samba for versions less than 4.18.3-1

CVE-2021-3738 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41916 affecting package samba for versions less than 4.18.3-1

CVE-2022-41916 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32746 affecting package samba for versions less than 4.18.3-1

CVE-2022-32746 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-20316 affecting package samba for versions less than 4.18.3-1

CVE-2021-20316 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-25719 affecting package samba for versions less than 4.18.3-1

CVE-2020-25719 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-0614 affecting package samba for versions less than 4.18.3-1

CVE-2023-0614 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32744 affecting package samba for versions less than 4.18.3-1

CVE-2022-32744 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-20277 affecting package samba for versions less than 4.18.3-1

CVE-2021-20277 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-25722 affecting package samba for versions less than 4.18.3-1

CVE-2020-25722 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-25717 affecting package samba for versions less than 4.18.3-1

CVE-2020-25717 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-17049 affecting package samba for versions less than 4.18.3-1

CVE-2020-17049 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-44758 affecting package samba for versions less than 4.18.3-1

CVE-2021-44758 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-32745 affecting package samba for versions less than 4.18.3-1

CVE-2022-32745 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-0225 affecting package samba for versions less than 4.18.3-1

CVE-2023-0225 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2017-12150 affecting package samba for versions less than 4.18.3-1

CVE-2017-12150 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

...

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

...