usn-5822-2
Vulnerability from osv_ubuntu
Published
2023-01-26 21:36
Modified
2026-04-22 07:37
Summary
samba regression
Details

USN-5822-1 fixed vulnerabilities in Samba. The update for Ubuntu 20.04 LTS introduced regressions in certain environments. Pending investigation of these regressions, this update temporarily reverts the security fixes.

We apologize for the inconvenience.

Original advisory details:

It was discovered that Samba incorrectly handled the bad password count logic. A remote attacker could possibly use this issue to bypass bad passwords lockouts. This issue was only addressed in Ubuntu 22.10. (CVE-2021-20251)

Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2022-3437)

Tom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos keys. A remote attacker could possibly use this issue to elevate privileges. (CVE-2022-37966, CVE-2022-37967)

It was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure Channel. A remote attacker could possibly use this issue to elevate privileges. (CVE-2022-38023)

Greg Hudson discovered that Samba incorrectly handled PAC parsing. On 32-bit systems, a remote attacker could use this issue to escalate privileges, or possibly execute arbitrary code. (CVE-2022-42898)

Joseph Sutton discovered that Samba could be forced to issue rc4-hmac encrypted Kerberos tickets. A remote attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-45141)

WARNING: The fixes included in these updates introduce several important behavior changes which may cause compatibility problems interacting with systems still expecting the former behavior. Please see the following upstream advisories for more information:

https://www.samba.org/samba/security/CVE-2022-37966.html https://www.samba.org/samba/security/CVE-2022-37967.html https://www.samba.org/samba/security/CVE-2022-38023.html

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [],
          "ecosystem": "Ubuntu:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ctdb",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "python3-samba",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "registry-tools",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "samba",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "samba-common",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "samba-libs",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "smbclient",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          },
          {
            "binary_name": "winbind",
            "binary_version": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "samba",
        "purl": "pkg:deb/ubuntu/samba@2:4.13.17~dfsg-0ubuntu1.20.04.5?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:4.13.17~dfsg-0ubuntu1.20.04.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:4.10.7+dfsg-0ubuntu2",
        "2:4.10.7+dfsg-0ubuntu3",
        "2:4.11.1+dfsg-3ubuntu1",
        "2:4.11.1+dfsg-3ubuntu2",
        "2:4.11.1+dfsg-3ubuntu4",
        "2:4.11.5+dfsg-1ubuntu1",
        "2:4.11.5+dfsg-1ubuntu2",
        "2:4.11.6+dfsg-0ubuntu1",
        "2:4.11.6+dfsg-0ubuntu1.1",
        "2:4.11.6+dfsg-0ubuntu1.2",
        "2:4.11.6+dfsg-0ubuntu1.3",
        "2:4.11.6+dfsg-0ubuntu1.4",
        "2:4.11.6+dfsg-0ubuntu1.5",
        "2:4.11.6+dfsg-0ubuntu1.6",
        "2:4.11.6+dfsg-0ubuntu1.8",
        "2:4.11.6+dfsg-0ubuntu1.9",
        "2:4.11.6+dfsg-0ubuntu1.10",
        "2:4.13.14+dfsg-0ubuntu0.20.04.1",
        "2:4.13.14+dfsg-0ubuntu0.20.04.2",
        "2:4.13.14+dfsg-0ubuntu0.20.04.3",
        "2:4.13.14+dfsg-0ubuntu0.20.04.4",
        "2:4.13.17~dfsg-0ubuntu0.21.04.1",
        "2:4.13.17~dfsg-0ubuntu0.21.04.2",
        "2:4.13.17~dfsg-0ubuntu1.20.04.1",
        "2:4.13.17~dfsg-0ubuntu1.20.04.2",
        "2:4.13.17~dfsg-0ubuntu1.20.04.4"
      ]
    }
  ],
  "aliases": [],
  "details": "USN-5822-1 fixed vulnerabilities in Samba. The update for Ubuntu 20.04 LTS\nintroduced regressions in certain environments. Pending investigation of\nthese regressions, this update temporarily reverts the security fixes.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that Samba incorrectly handled the bad password count\n logic. A remote attacker could possibly use this issue to bypass bad\n passwords lockouts. This issue was only addressed in Ubuntu 22.10.\n (CVE-2021-20251)\n \n Evgeny Legerov discovered that Samba incorrectly handled buffers in\n certain GSSAPI routines of Heimdal. A remote attacker could possibly use\n this issue to cause Samba to crash, resulting in a denial of service.\n (CVE-2022-3437)\n \n Tom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos\n keys. A remote attacker could possibly use this issue to elevate\n privileges. (CVE-2022-37966, CVE-2022-37967)\n \n It was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure\n Channel. A remote attacker could possibly use this issue to elevate\n privileges. (CVE-2022-38023)\n \n Greg Hudson discovered that Samba incorrectly handled PAC parsing. On\n 32-bit systems, a remote attacker could use this issue to escalate\n privileges, or possibly execute arbitrary code. (CVE-2022-42898)\n \n Joseph Sutton discovered that Samba could be forced to issue rc4-hmac\n encrypted Kerberos tickets. A remote attacker could possibly use this issue\n to escalate privileges. This issue only affected Ubuntu 20.04 LTS and\n Ubuntu 22.04 LTS. (CVE-2022-45141)\n \n WARNING: The fixes included in these updates introduce several important\n behavior changes which may cause compatibility problems interacting with\n systems still expecting the former behavior. Please see the following\n upstream advisories for more information:\n \n https://www.samba.org/samba/security/CVE-2022-37966.html\n https://www.samba.org/samba/security/CVE-2022-37967.html\n https://www.samba.org/samba/security/CVE-2022-38023.html\n",
  "id": "USN-5822-2",
  "modified": "2026-04-22T07:37:03Z",
  "published": "2023-01-26T21:36:01Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-5822-2"
    },
    {
      "type": "REPORT",
      "url": "https://launchpad.net/bugs/2003867"
    },
    {
      "type": "REPORT",
      "url": "https://launchpad.net/bugs/2003891"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "samba regression",
  "upstream": []
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.