Red Hat Enterprise Linux 9 update for samba

1) Use of insufficiently random values

EUVDB-ID: #VU67270

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-1615

CWE-ID: CWE-330 - Use of Insufficiently Random Values

Exploit availability: No

Description

The vulnerability allows a remote user to gain access to sensitive information.

The vulnerability exists due to usage of predictable random values within the GnuTLS gnutls_rnd() function. A remote user can decrypt sensitive information.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Red Hat Enterprise Linux for ARM 64: 9

Red Hat Enterprise Linux for Power, little endian: 9

Red Hat Enterprise Linux for IBM z Systems: 9

Red Hat Enterprise Linux for x86_64: 9

samba (Red Hat package): before 4.17.5-102.el9

openchange (Red Hat package): before 2.3-40.el9

evolution-mapi (Red Hat package): before 3.40.1-5.el9

CPE2.3

• cpe:2.3:o:red_hat:red_hat_enterprise_linux_for_arm_64:9:*:*:*:*:red_hat_enterprise_linux:*:*

External links

http://access.redhat.com/errata/RHSA-2023:2519

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?