Use of a broken or risky cryptographic algorithm in Windows Server - CVE-2022-38023

Vulnerability identifier: #VU69151

CSH Severity: High

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

CVE-ID: CVE-2022-38023

CWE-ID: CWE-254

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
Windows Server
Oracle Linux
Gentoo Linux
Amazon Linux AMI
Oracle Solaris
SUSE Linux Enterprise Server 15
SUSE Manager Retail Branch Server
SUSE CaaS Platform
SUSE Manager Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux Resilient Storage for x86_64
Red Hat Enterprise Linux for Power, little endian
CentOS
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
Slackware Linux
SUSE Linux Enterprise Realtime Extension
SUSE Linux Enterprise Module for Python2
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
openEuler
Ubuntu
Fedora
Red Hat OpenShift Container Platform
Samba
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libndr-nbt0
libdcerpc0
libdcerpc0-debuginfo-32bit
libdcerpc0-debuginfo
libndr-krb5pac0-32bit
libndr-krb5pac0
libndr-krb5pac0-debuginfo-32bit
libndr-krb5pac0-debuginfo
libndr-nbt0-32bit
libdcerpc0-32bit
libndr-nbt0-debuginfo-32bit
libndr-nbt0-debuginfo
libndr-standard0-32bit
libndr-standard0
libndr-standard0-debuginfo-32bit
libndr-standard0-debuginfo
libndr0-32bit
libndr0
libndr0-debuginfo-32bit
libndr0-debuginfo
libtevent-util0-debuginfo
samba-client-debuginfo
samba-client-debuginfo-32bit
samba-client
samba-client-32bit
samba
libwbclient0-debuginfo
libwbclient0-debuginfo-32bit
libwbclient0
libwbclient0-32bit
libnetapi0
libtevent-util0-debuginfo-32bit
libtevent-util0
libtevent-util0-32bit
libsmbldap0-debuginfo
samba-doc
libdcerpc-binding0-32bit
libdcerpc-binding0
libdcerpc-binding0-debuginfo-32bit
libdcerpc-binding0-debuginfo
libsmbclient0
libsamba-util0-32bit
libsamba-util0
libsamba-util0-debuginfo-32bit
libsamba-util0-debuginfo
libsamdb0-32bit
libsamdb0
libsamdb0-debuginfo-32bit
libsamdb0-debuginfo
libsmbclient0-32bit
libsamba-passdb0-debuginfo
libsmbclient0-debuginfo-32bit
libsmbclient0-debuginfo
libsmbconf0-32bit
libsmbconf0
libsmbconf0-debuginfo-32bit
libsmbconf0-debuginfo
libsmbldap0-32bit
libsmbldap0
libsmbldap0-debuginfo-32bit
libsamba-errors0-debuginfo-32bit
samba-debugsource
libnetapi0-debuginfo-32bit
libnetapi0-debuginfo
libsamba-credentials0-32bit
libsamba-credentials0
libsamba-credentials0-debuginfo-32bit
libsamba-credentials0-debuginfo
libsamba-errors0-32bit
libsamba-errors0
libnetapi0-32bit
libsamba-errors0-debuginfo
libsamba-hostconfig0-32bit
libsamba-hostconfig0
libsamba-hostconfig0-debuginfo-32bit
libsamba-hostconfig0-debuginfo
libsamba-passdb0-32bit
libsamba-passdb0
libsamba-passdb0-debuginfo-32bit
samba-debuginfo
samba-libs-32bit
samba-libs
samba-libs-debuginfo-32bit
samba-libs-debuginfo
samba-winbind-32bit
samba-winbind
samba-winbind-debuginfo-32bit
samba-winbind-debuginfo
redhat-release-virtualization-host (Red Hat package)
ctdb-debuginfo
ctdb
libndr-devel
libndr-krb5pac-devel
libndr-nbt-devel
libndr-standard-devel
libnetapi-devel
libsamba-policy-python-devel
samba-libs-python-32bit
libsamba-policy0
libsamba-policy0-debuginfo
samba-libs-python
samba-libs-python-debuginfo
samba-python
samba-python-debuginfo
libsamba-policy0-32bit
libsamba-policy0-32bit-debuginfo
samba-libs-python-32bit-debuginfo
libdcerpc-devel
libdcerpc-samr-devel
libdcerpc-samr0
libdcerpc-samr0-debuginfo
libsmbconf-devel
libsamdb-devel
libsmbclient-devel
libsamba-util-devel
libsmbldap-devel
libsmbldap2
libsmbldap2-debuginfo
libtevent-util-devel
libsamba-credentials-devel
libsamba-errors-devel
libsamba-hostconfig-devel
libsamba-passdb-devel
libsamba-policy-devel
libsamba-policy-python3-devel
libsamba-policy0-python3
libsamba-policy0-python3-debuginfo
libndr0-32bit-debuginfo
libnetapi0-32bit-debuginfo
libsamba-credentials0-32bit-debuginfo
libsamba-errors0-32bit-debuginfo
libsamba-hostconfig0-32bit-debuginfo
libsamba-passdb0-32bit-debuginfo
libsamba-util0-32bit-debuginfo
libsamdb0-32bit-debuginfo
libsmbconf0-32bit-debuginfo
libsmbldap2-32bit
libsmbldap2-32bit-debuginfo
libtevent-util0-32bit-debuginfo
libwbclient0-32bit-debuginfo
samba-libs-32bit-debuginfo
samba-winbind-32bit-debuginfo
samba-ceph
samba-ceph-debuginfo
libndr-standard0-32bit-debuginfo
libwbclient-devel
samba-ad-dc
samba-ad-dc-debuginfo
samba-core-devel
samba-dsdb-modules
samba-dsdb-modules-debuginfo
samba-libs-python3
samba-python3
samba-libs-python3-debuginfo
libndr-nbt0-32bit-debuginfo
libndr-krb5pac0-32bit-debuginfo
libdcerpc-binding0-32bit-debuginfo
samba-python3-debuginfo
libdcerpc0-32bit-debuginfo
samba (Red Hat package)
libsmbclient
libwbclient
samba-client-libs
samba-common-libs
samba-common-tools
samba-dc
samba-dc-libs
samba-devel
samba-pidl
ctdb-tests
samba-krb5-printing
samba-python-test
samba-test
samba-test-libs
samba-winbind-clients
samba-winbind-krb5-locator
samba-winbind-modules
samba-vfs-glusterfs
samba-common
python3-samba
samba-help
samba-dc-provision
samba-dc-bind-dlz
python3-samba-dc
python3-samba-test
libndr1
libndr1-debuginfo
samba (Ubuntu package)
samba-winbind-libs-32bit
samba-client-libs-debuginfo
samba-winbind-libs-debuginfo-32bit
samba-ldb-ldap-debuginfo
samba-ldb-ldap
samba-devel-32bit
samba-libs-python3-debuginfo-32bit
samba-libs-python3-32bit
samba-client-libs-debuginfo-32bit
samba-client-libs-32bit
samba-tool
libsamba-policy0-python3-debuginfo-32bit
libsamba-policy0-python3-32bit
samba-winbind-libs-debuginfo
samba-winbind-libs
samba-client-libs-32bit-debuginfo
samba-client-32bit-debuginfo
samba-ad-dc-libs-32bit-debuginfo
samba-ad-dc-libs-32bit
samba-ad-dc-libs
samba-ad-dc-libs-debuginfo
samba-gpupdate
samba-winbind-libs-32bit-debuginfo
samba-test-debuginfo
libsamba-policy0-python3-32bit-debuginfo
samba-libs-python3-32bit-debuginfo
ctdb-pcp-pmda
ctdb-pcp-pmda-debuginfo
samba-winexe
net-fs/samba
HP-UX Common Internet File System (CIFS)
IBM Cloud Pak for Watson AIOps
XtremIO X2
EMC Cloud Tiering Appliance
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
Session Smart Router
Dell EMC VxRail Appliance
IBM Qradar SIEM
RSA Authentication Manager
Juniper Junos Space

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to security features bypass in Netlogon RPC. A remote attacker can bypass the Netlogon cryptography feature for signing and sealing traffic during Netlogon authentication.

Install updates from vendor's website.

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-38023