Use of a broken or risky cryptographic algorithm in Samba - CVE-2022-45141

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU70384

Use of a broken or risky cryptographic algorithm in Samba - CVE-2022-45141

Published: December 15, 2022


Vulnerability identifier: #VU70384
CSH Severity: High
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-45141
CWE-ID: CWE-327
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to bypass authentication.

The vulnerability exists due to an error that allows an attacker to force the server so issue an rc4-hmac ticket encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96). A remote attacker can perform an offline attack against the ticket encrypted with rc4-hmac and login as a privileged user.


Affected software

Samba
Gentoo Linux
Amazon Linux AMI
Ubuntu
Slackware Linux
openEuler
HP-UX Common Internet File System (CIFS)
samba (Ubuntu package)
samba-debuginfo
samba
libsmbclient-devel
samba-dc-bind-dlz
ctdb-tests
samba-dc-provision
samba-common
python3-samba-dc
samba-winbind-modules
samba-client
samba-debugsource
ctdb
python3-samba
samba-winbind-clients
samba-libs
samba-winbind-krb5-locator
samba-dc
samba-devel
libwbclient-devel
samba-common-tools
samba-krb5-printing
samba-winbind
samba-test
python3-samba-test
libsmbclient
samba-help
libwbclient
samba-pidl
samba-vfs-glusterfs
net-fs/samba

How to mitigate CVE-2022-45141

Install updates from vendor's website.

Samba - update to 4.15.13
HP-UX Common Internet File System (CIFS) - update to B.04.18.01.00
samba (Ubuntu package) - addressed in versions 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13, 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14, 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2, 2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3, 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1, 2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2, 2:4.13.17~dfsg-0ubuntu1.20.04.4, 2:4.13.17~dfsg-0ubuntu1.20.04.5, 2:4.15.13+dfsg-0ubuntu0.20.04.1, 2:4.15.13+dfsg-0ubuntu1, 2:4.16.8+dfsg-0ubuntu1
samba-debuginfo - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
libsmbclient-devel - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-dc-bind-dlz - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
ctdb-tests - addressed in versions 4.11.12-23, 4.11.12-24
samba-dc-provision - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-common - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
python3-samba-dc - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-winbind-modules - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-client - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-debugsource - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
ctdb - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
python3-samba - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-winbind-clients - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-libs - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-winbind-krb5-locator - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-dc - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-devel - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
libwbclient-devel - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-common-tools - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-krb5-printing - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-winbind - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-test - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
python3-samba-test - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
libsmbclient - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-help - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
libwbclient - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-pidl - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba-vfs-glusterfs - addressed in versions 4.11.12-23, 4.11.12-24, 4.15.3-18
samba - update to 4.15.13
samba - update to 4.17.5-0
net-fs/samba - update to 4.18.4

External References

Related Security Bulletins