by Kastro
Paper/Archive/CVE-2022-45141

CVE-2022-45141

redhat — Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is a…

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 39.4.394 × 207.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

Affected

ProductAffectedFixed inSource
SambaFixed in samba 4.15.13, samba 4.16.8, samba 4.15.13–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsamba.org/samba/security/CVE-2022-45141.htmladvisorysecurity.gentoo.org/glsa/202309-06