FlawAtlas
Search the atlas
SUSE-SU-2023:0014-1 Not scored

Security update for samba

This update for samba fixes the following issues: Update to 4.15.13 - CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers (bsc#1205385). - CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC (bsc#1205386). - CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (bsc#1206504). - Fixed issue with bind start up (bsc#1205946).

Exploit probability Not scored
Published January 2, 2023
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Enterprise Storage 7.1 samba
SUSE:Linux Enterprise High Availability Extension 15 SP3 samba
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS samba
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS samba
SUSE:Linux Enterprise Micro 5.2 samba
SUSE:Linux Enterprise Module for Basesystem 15 SP3 samba
SUSE:Linux Enterprise Module for Python 2 15 SP3 samba
SUSE:Linux Enterprise Real Time 15 SP3 samba
SUSE:Linux Enterprise Server 15 SP3-LTSS samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 samba
SUSE:Manager Proxy 4.2 samba
SUSE:Manager Retail Branch Server 4.2 samba
SUSE:Manager Server 4.2 samba
openSUSE:Leap Micro 5.2 samba

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2023:0014-1

This update for samba fixes the following issues: Update to 4.15.13 - CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers (bsc#1205385). - CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC (bsc#1205386). - CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (bsc#1206504). - Fixed issue with bind start up (bsc#1205946).

View original source

05 / REFERENCES

Further evidence