Lucene search
Veracode Vulnerability DatabaseVERACODE:38566HistoryDec 22, 2022 - 10:43 a.m.
Privilege Escalation
2022-12-2210:43:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
39
samba
vulnerability
service account
constrained delegation
permission
ticketforgery
EPSS
0.058
Percentile
93.6%
samba is vulnerable to Privilege Escalation. The vulnerability exists because the service account with the special constrained delegation permission could forge a more powerful ticket than the one it was presented with.
Affected configurations
Node
-samba\Matchsid2\4.13.5+dfsg-2
OR-samba\Matchsid2\4.13.2+dfsg-3
OR-samba\Match3.154.15.2-r0
OR-samba\Match3.154.15.1-r1
OR-samba\Match3.154.15.5-r0
OR-samba\Match3.154.15.0-r0
OR-samba\Matchfocal2\4.11.6+dfsg-0ubuntu1
OR-samba\Matchfocal2\4.11.6+dfsg-0ubuntu1.6
OR-samba\Matchfocal2\4.11.6+dfsg-0ubuntu1.4
OR-samba\Matchdevel2\4.12.5+dfsg-3ubuntu3
OR-samba\Matchdevel2\4.12.5+dfsg-3ubuntu4.1
OR-samba\Matchdevel2\4.13.2+dfsg-3ubuntu1
OR-samba\Matchdevel2\4.13.3+dfsg-1ubuntu2
OR-samba\Matchdevel2\4.13.5+dfsg-2ubuntu2
OR-samba\Match3.164.15.7-r0
OR-samba\Matchsid2\4.13.5+dfsg-2
OR-samba\Matchsid2\4.13.2+dfsg-3
OR-samba\Match3.154.15.2-r0
OR-samba\Match3.154.15.1-r1
OR-samba\Match3.154.15.5-r0
OR-samba\Match3.154.15.0-r0
OR-samba\Matchfocal2\4.11.6+dfsg-0ubuntu1
OR-samba\Matchfocal2\4.11.6+dfsg-0ubuntu1.6
OR-samba\Matchfocal2\4.11.6+dfsg-0ubuntu1.4
OR-samba\Matchdevel2\4.12.5+dfsg-3ubuntu3
OR-samba\Matchdevel2\4.12.5+dfsg-3ubuntu4.1
OR-samba\Matchdevel2\4.13.2+dfsg-3ubuntu1
OR-samba\Matchdevel2\4.13.3+dfsg-1ubuntu2
OR-samba\Matchdevel2\4.13.5+dfsg-2ubuntu2
OR-samba\Match3.164.15.7-r0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| - | samba\ | sid | cpe:2.3:a:-:samba\:sid:2\:4.13.5+dfsg-2:*:*:*:*:*:*:* |
| - | samba\ | sid | cpe:2.3:a:-:samba\:sid:2\:4.13.2+dfsg-3:*:*:*:*:*:*:* |
| - | samba\ | 3.15 | cpe:2.3:a:-:samba\:3.15:4.15.2-r0:*:*:*:*:*:*:* |
| - | samba\ | 3.15 | cpe:2.3:a:-:samba\:3.15:4.15.1-r1:*:*:*:*:*:*:* |
| - | samba\ | 3.15 | cpe:2.3:a:-:samba\:3.15:4.15.5-r0:*:*:*:*:*:*:* |
| - | samba\ | 3.15 | cpe:2.3:a:-:samba\:3.15:4.15.0-r0:*:*:*:*:*:*:* |
| - | samba\ | focal | cpe:2.3:a:-:samba\:focal:2\:4.11.6+dfsg-0ubuntu1:*:*:*:*:*:*:* |
| - | samba\ | focal | cpe:2.3:a:-:samba\:focal:2\:4.11.6+dfsg-0ubuntu1.6:*:*:*:*:*:*:* |
| - | samba\ | focal | cpe:2.3:a:-:samba\:focal:2\:4.11.6+dfsg-0ubuntu1.4:*:*:*:*:*:*:* |
| - | samba\ | devel | cpe:2.3:a:-:samba\:devel:2\:4.12.5+dfsg-3ubuntu3:*:*:*:*:*:*:* |
References
lists.fedoraproject.org/archives/list/[email protected]/message/G2CYDXPFBQES2Z4KLZDILGXFFQ3VIGZ4/
lists.fedoraproject.org/archives/list/[email protected]/message/VCTYD5EQRS73QZTWPOC2ZO2FL7MMYXMS/
msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37967
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37967
security-tracker.debian.org/tracker/CVE-2022-37967
security.gentoo.org/glsa/202309-06
security.netapp.com/advisory/ntap-20230110-0003/
Related
debiancve
debiancve
CVE-2022-37967
2022-11-09 22:15:14
nessus
nessus
Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-37967) (November 2022)
2023-05-24 00:00:00
SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2023:0014-1)
2023-01-03 00:00:00
Fedora 36 : 2:samba (2022-7f9021ead1)
2022-12-21 00:00:00
prion
prion
Privilege escalation
2022-11-09 22:15:00
alpinelinux
alpinelinux
CVE-2022-37967
2022-11-09 22:15:14
mskb
mskb
KB5027388: Compatibility update for installing and recovering Windows Server 2022 and Azure Stack HCI, version 22H2: June 13, 2023
2022-11-08 08:00:00
November 8, 2022—KB5020005 (Security-only update)
2022-11-08 08:00:00
November 8, 2022—KB5020019 (Monthly Rollup)
2022-11-08 08:00:00
redhatcve
redhatcve
CVE-2022-37967
2022-12-16 16:00:42
mscve
mscve
Windows Kerberos Elevation of Privilege Vulnerability
2022-11-08 08:00:00
vulnrichment
vulnrichment
CVE-2022-37967 Windows Kerberos Elevation of Privilege Vulnerability
2022-11-09 00:00:00
redos
redos
ROS-20240904-15
2024-09-04 00:00:00
samba
samba
Kerberos constrained delegation ticket
2022-12-15 00:00:00
ubuntucve
ubuntucve
CVE-2022-37967
2022-11-09 00:00:00
nvd
nvd
CVE-2022-37967
2022-11-09 22:15:14
cve
cve
CVE-2022-37967
2022-11-09 22:15:14
osv
osv
CVE-2022-37967
2022-11-09 22:15:14
ctdb-4.17.4+git.300.305b22bfce-1.1 on GA media
2024-06-15 00:00:00
samba vulnerabilities
2023-03-08 13:02:34
rocky
rocky
krb5 bug fix update
2023-08-31 16:54:20
cvelist
cvelist
CVE-2022-37967 Windows Kerberos Elevation of Privilege Vulnerability
2022-11-09 00:00:00
openvas
openvas
Fedora: Security Advisory for samba (FEDORA-2022-7f9021ead1)
2022-12-21 00:00:00
Samba Multiple Vulnerabilities (Dec 2022)
2022-12-19 00:00:00
Fedora: Security Advisory for samba (FEDORA-2022-cb92b4ea21)
2022-12-19 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: samba-4.16.8-0.fc36
2022-12-21 01:19:35
[SECURITY] Fedora 37 Update: samba-4.17.4-0.fc37
2022-12-19 01:18:39
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.16.8-alt1
2022-12-15 00:00:00
cisa
cisa
Samba Releases Security Updates
2022-12-16 00:00:00
thn
thn
slackware
slackware
[slackware-security] samba
2022-12-17 21:30:27
ubuntu
ubuntu
Samba vulnerabilities
2023-03-08 00:00:00
Samba regression
2023-01-26 00:00:00
Samba vulnerabilities
2023-01-24 00:00:00
mageia
mageia
Updated samba packages fix security vulnerability
2023-01-24 10:58:24
talosblog
talosblog
avleonov
avleonov
qualysblog
qualysblog
kaspersky
kaspersky
KLA20045 Multiple vulnerabilities in Microsoft Products (ESU)
2022-11-08 00:00:00
KLA20047 Multiple vulnerabilities in Microsoft Windows
2022-11-08 00:00:00
gentoo
gentoo
Samba: Multiple Vulnerabilities
2023-09-17 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - November 2022
2022-11-08 20:02:57
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0603
2023-06-26 00:00:00