8.1

CVE-2022-38023: fedoraproject fedora

CVSS: 8.1v3.1HighModified
AliasesALPINE-CVE-2022-38023RHSA-2023:0637RHSA-2023:0638
Published 09-11-2022Last modified 10-08-2026
Open JSON

Vulnerability summary

CVE-2022-38023 is a high (CVSS 8.1) vulnerability in fedoraproject fedora. EPSS estimates a 2.37% chance of exploitation in the next 30 days, higher than 83.5% of scored vulnerabilities.

Overall risk
33/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.1/10
010
High · v3.1 (CVE.org)
EPSS score
2.37%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 15 · Related 16
MGASA-2023-0010OPENSUSE-SU-2024:12587-1RHSA-2023:3491SUSE-SU-2023:0014-1SUSE-SU-2023:0081-1SUSE-SU-2023:0122-1

Timeline

  1. 09-11-2022
    PublishedVulnerability first disclosed.
  2. 10-08-2026
    Last modifiedVulnerability information updated.

Description

Netlogon RPC Elevation of Privilege Vulnerability

CVSS metrics

8 scores · 8 sources · 1 version

EPSS trend

Probability

2.37%

Chance of exploitation in the next 30 days

Percentile

84%

Versus all other CVEs

30-day change

+0.01 pp

From 2.36% on 20-09-2026

20-09-202620-10-2026
EPSS score
2.37%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat53 products
  • ctdb< 0:4.13.3-11.el8_4 | < 0:4.11.2-22.el8_2 | < 0:4.10.4-107.el8_1 | < 0:4.16.4-4.el8_7 | < 0:4.10.16-24.el7_9 | < 0:4.16.4-103.el9_1 | < 0:4.15.5-12.el8_6 | < 0:4.15.5-110.el9_0
  • ctdb-debuginfo< 0:4.13.3-11.el8_4 | < 0:4.11.2-22.el8_2 | < 0:4.10.4-107.el8_1 | < 0:4.16.4-4.el8_7 | < 0:4.16.4-103.el9_1 | < 0:4.15.5-12.el8_6 | < 0:4.15.5-110.el9_0
  • ctdb-tests< 0:4.13.3-11.el8_4 | < 0:4.11.2-22.el8_2 | < 0:4.10.4-107.el8_1 | < 0:4.10.16-24.el7_9
  • ctdb-tests-debuginfo< 0:4.13.3-11.el8_4 | < 0:4.11.2-22.el8_2 | < 0:4.10.4-107.el8_1
  • libsmbclient< 0:4.13.3-11.el8_4 | < 0:4.11.2-22.el8_2 | < 0:4.10.4-107.el8_1 | < 0:4.16.4-4.el8_7 | < 0:4.10.16-24.el7_9 | < 0:4.16.4-103.el9_1 | < 0:4.15.5-12.el8_6 | < 0:4.15.5-110.el9_0
Microsoft15 products
Netapp2 products
Alpine1 product
  • samba≥ 4.16.0, < 4.15.13-r0
Chainguard1 product
  • libauth-samba< 4.22.0-r0
Debian1 product
  • samba< 2:4.17.4+dfsg-1
Fedoraproject1 product
Samba1 product
  • samba< 4.15.13 | ≥ 4.16.0, < 4.16.8 | ≥ 4.17.0, < 4.17.4
Ubuntu1 product
  • sambaAll versions (No fix recorded) | < 2:4.15.13+dfsg-0ubuntu0.20.04.1 | < 2:4.15.13+dfsg-0ubuntu1
Wolfi1 product
  • libauth-samba< 4.22.0-r0

10 vendors · 77 products

References

30 links
Show all 30 references