CVE-2022-45141
samba: Samba AD DC using Heimdal can be forced to issue rc4-hmac encrypted Kerberos tickets
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, Azure Linux. Más baja según Red Hat (alta), Amazon (alta), Ubuntu (media).
Descripción
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| Azure Linux 3.0 | samba | 0:4.18.3-1.azl3 |
| alpine 3.15 | samba | 4.15.13-r0 |
| alpine 3.16 | samba | 4.15.13-r0 |
| amazon linux 2023 | libnetapi, libnetapi-debuginfo, libnetapi-devel y 49 más | 2:4.17.5-0.amzn2023.0.2 |
| debian 10 | samba | sin corrección indicada |
| debian 11 | samba | sin corrección indicada |
| debian 12 | samba | 2:4.16.0+dfsg-2 |
| debian 13 | samba | 2:4.16.0+dfsg-2 |
| debian 14 | samba | 2:4.16.0+dfsg-2 |
| echo | samba | 2:4.16.0+dfsg-2 |
| rapidfort ubuntu 20.04 | rf-samba, samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 y 1 más |
| rapidfort ubuntu 22.04 | rf-samba, samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 y 1 más |
Mostrar las 73 entradas de 19 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| Azure Linux 3.0 | samba | 0:4.18.3-1.azl3 |
| alpine 3.15 | samba | 4.15.13-r0 |
| alpine 3.16 | samba | 4.15.13-r0 |
| amazon linux 2023 | libnetapi | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | libnetapi-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | libnetapi-devel | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | libsmbclient | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | libsmbclient-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | libsmbclient-devel | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | libwbclient | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | libwbclient-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | libwbclient-devel | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | python3-samba | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | python3-samba-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | python3-samba-devel | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | python3-samba-test | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-client | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-client-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-client-libs | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-client-libs-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-common | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-common-libs | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-common-libs-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-common-tools | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-common-tools-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-dc-libs | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-dc-libs-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-dcerpc | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-dcerpc-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-debugsource | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-devel | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-krb5-printing | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-krb5-printing-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-ldb-ldap-modules | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-ldb-ldap-modules-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-libs | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-libs-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-pidl | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-test | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-test-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-test-libs | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-test-libs-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-usershares | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-vfs-iouring | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-vfs-iouring-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-winbind | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-winbind-clients | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-winbind-clients-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-winbind-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-winbind-krb5-locator | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-winbind-krb5-locator-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-winbind-modules | 2:4.17.5-0.amzn2023.0.2 |
| amazon linux 2023 | samba-winbind-modules-debuginfo | 2:4.17.5-0.amzn2023.0.2 |
| debian 10 | samba | sin corrección indicada |
| debian 11 | samba | sin corrección indicada |
| debian 12 | samba | 2:4.16.0+dfsg-2 |
| debian 13 | samba | 2:4.16.0+dfsg-2 |
| debian 14 | samba | 2:4.16.0+dfsg-2 |
| echo | samba | 2:4.16.0+dfsg-2 |
| rapidfort ubuntu 20.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| rapidfort ubuntu 20.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1 |
| rapidfort ubuntu 22.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| rapidfort ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1 |
| rapidfort ubuntu 24.04 | rf-samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| rapidfort ubuntu 24.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1 |
| root.io debian 12 | rootio-samba | 2:4.16.0+dfsg-2 |
| ubuntu 16.04-ESM | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2 |
| ubuntu 18.04-ESM | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1 |
| ubuntu 20.04 | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| ubuntu 20.04-ESM | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.1 |
| ubuntu 22.04 | samba | 2:4.15.13+dfsg-0ubuntu1 |
Referencias
- https://access.redhat.com/security/cve/CVE-2022-45141
- https://nvd.nist.gov/vuln/detail/CVE-2022-45141
- https://security.gentoo.org/glsa/202309-06
- https://ubuntu.com/security/notices/USN-5822-1
- https://ubuntu.com/security/notices/USN-5822-2
- https://ubuntu.com/security/notices/USN-5936-1
- https://ubuntu.com/security/notices/USN-7582-1
- https://www.cve.org/CVERecord?id=CVE-2022-45141