SUSE-SU-2023:0014-1: samba&distro=openSUSE Leap Micro 5.2
Vulnerability summary
SUSE-SU-2023:0014-1 is a vulnerability in samba&distro=openSUSE Leap Micro 5.2 with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0 · Related 3Timeline
- 02-01-2023PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
Security update for samba This update for samba fixes the following issues: Update to 4.15.13 - CVE-2022-37966 rc4-hmac Kerberos session keys issued to modern servers (bsc#1205385). - CVE-2022-37967 Kerberos constrained delegation ticket forgery possible against Samba AD DC (bsc#1205386). - CVE-2022-38023 RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (bsc#1206504). - Fixed issue with bind start up (bsc#1205946).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse13 products
- samba&distro=SUSE Enterprise Storage 7.1< 4.15.13+git.540.fab3b2a46c6-150300.3.46.1
- samba&distro=SUSE Linux Enterprise High Availability Extension 15 SP3< 4.15.13+git.540.fab3b2a46c6-150300.3.46.1
- samba&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 4.15.13+git.540.fab3b2a46c6-150300.3.46.1
- samba&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 4.15.13+git.540.fab3b2a46c6-150300.3.46.1
- samba&distro=SUSE Linux Enterprise Micro 5.2< 4.15.13+git.540.fab3b2a46c6-150300.3.46.1
Opensuse1 product
- samba&distro=openSUSE Leap Micro 5.2< 4.15.13+git.540.fab3b2a46c6-150300.3.46.1
2 vendors · 14 products