PT-2022-6084 · Samba+5 · Samba+5

Joseph Sutton · Published 2022-11-08 · Updated 2025-10-06 · CVE-2022-45141

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samba Active Directory DCs (affected versions not specified)

Description The issue is related to the use of the RC4-HMAC cryptographic algorithm in the implementation of the Heimdal Kerberos protocol in Samba. This can allow a remote attacker to execute arbitrary code. Vulnerable Samba Active Directory DCs will issue RC4-HMAC encrypted tickets despite the target server supporting better encryption, such as aes256-cts-hmac-sha1-96.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Inadequate Encryption Strength

Weakness Enumeration

CWE-327

CWE-326

CWE-328

Related Identifiers

ALT-PU-2022-3352

ALT-PU-2023-1371

ALT-PU-2024-14683

AZL-25602

AZL-37018

BDU:2023-00022

CVE-2022-45141

MGASA-2023-0010

OESA-2023-1016

OESA-2023-1017

OESA-2023-1018

USN-5822-1

USN-5822-2

USN-5936-1

USN-7582-1

USN-7582-2

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Samba

Ubuntu

References · 83

• https://ubuntu.com/security/notices/USN-7582-2 · Vendor Advisory
• https://samba.org/samba/security/CVE-2022-45141.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5822-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5936-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45141 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-25602 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1018 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5822-2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/RWT32WRO3GIUCYYBMM7WJSBXB7UVCOAU · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/VCTYD5EQRS73QZTWPOC2ZO2FL7MMYXMS · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5936-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-42898 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20241206SE81 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/YOHL3O2H4FYUTUK2D4PURO24UAX3EBPW · Vendor Advisory