跳转到帖子

Amazon Linux 2023: CVE-2022-38023: Important priority package update for samba

recommended_posts

发布于
  • Members

Amazon Linux 2023: CVE-2022-38023: Important priority package update for samba

Severity
8
CVSS
(AV:N/AC:H/Au:N/C:C/I:C/A:C)
Published
12/16/2022
Created
02/14/2025
Added
02/14/2025
Modified
02/14/2025

Description

Netlogon RPC Elevation of Privilege Vulnerability A flaw was found in samba. The Netlogon RPC implementations may use the rc4-hmac encryption algorithm, which is considered weak and should be avoided even if the client supports more modern encryption types. This issue could allow an attacker who knows the plain text content communicated between the samba client and server to craft data with the same MD5 calculation and replace it without being detected.

Solution(s)

  • amazon-linux-2023-upgrade-libnetapi
  • amazon-linux-2023-upgrade-libnetapi-debuginfo
  • amazon-linux-2023-upgrade-libnetapi-devel
  • amazon-linux-2023-upgrade-libsmbclient
  • amazon-linux-2023-upgrade-libsmbclient-debuginfo
  • amazon-linux-2023-upgrade-libsmbclient-devel
  • amazon-linux-2023-upgrade-libwbclient
  • amazon-linux-2023-upgrade-libwbclient-debuginfo
  • amazon-linux-2023-upgrade-libwbclient-devel
  • amazon-linux-2023-upgrade-python3-samba
  • amazon-linux-2023-upgrade-python3-samba-debuginfo
  • amazon-linux-2023-upgrade-python3-samba-devel
  • amazon-linux-2023-upgrade-python3-samba-test
  • amazon-linux-2023-upgrade-samba
  • amazon-linux-2023-upgrade-samba-client
  • amazon-linux-2023-upgrade-samba-client-debuginfo
  • amazon-linux-2023-upgrade-samba-client-libs
  • amazon-linux-2023-upgrade-samba-client-libs-debuginfo
  • amazon-linux-2023-upgrade-samba-common
  • amazon-linux-2023-upgrade-samba-common-libs
  • amazon-linux-2023-upgrade-samba-common-libs-debuginfo
  • amazon-linux-2023-upgrade-samba-common-tools
  • amazon-linux-2023-upgrade-samba-common-tools-debuginfo
  • amazon-linux-2023-upgrade-samba-dcerpc
  • amazon-linux-2023-upgrade-samba-dcerpc-debuginfo
  • amazon-linux-2023-upgrade-samba-dc-libs
  • amazon-linux-2023-upgrade-samba-dc-libs-debuginfo
  • amazon-linux-2023-upgrade-samba-debuginfo
  • amazon-linux-2023-upgrade-samba-debugsource
  • amazon-linux-2023-upgrade-samba-devel
  • amazon-linux-2023-upgrade-samba-krb5-printing
  • amazon-linux-2023-upgrade-samba-krb5-printing-debuginfo
  • amazon-linux-2023-upgrade-samba-ldb-ldap-modules
  • amazon-linux-2023-upgrade-samba-ldb-ldap-modules-debuginfo
  • amazon-linux-2023-upgrade-samba-libs
  • amazon-linux-2023-upgrade-samba-libs-debuginfo
  • amazon-linux-2023-upgrade-samba-pidl
  • amazon-linux-2023-upgrade-samba-test
  • amazon-linux-2023-upgrade-samba-test-debuginfo
  • amazon-linux-2023-upgrade-samba-test-libs
  • amazon-linux-2023-upgrade-samba-test-libs-debuginfo
  • amazon-linux-2023-upgrade-samba-usershares
  • amazon-linux-2023-upgrade-samba-vfs-iouring
  • amazon-linux-2023-upgrade-samba-vfs-iouring-debuginfo
  • amazon-linux-2023-upgrade-samba-winbind
  • amazon-linux-2023-upgrade-samba-winbind-clients
  • amazon-linux-2023-upgrade-samba-winbind-clients-debuginfo
  • amazon-linux-2023-upgrade-samba-winbind-debuginfo
  • amazon-linux-2023-upgrade-samba-winbind-krb5-locator
  • amazon-linux-2023-upgrade-samba-winbind-krb5-locator-debuginfo
  • amazon-linux-2023-upgrade-samba-winbind-modules
  • amazon-linux-2023-upgrade-samba-winbind-modules-debuginfo

References

  • https://attackerkb.com/topics/cve-2022-38023
  • CVE - 2022-38023
  • https://alas.aws.amazon.com/AL2023/ALAS-2023-032.html
  • 查看数 700
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…