The version of samba installed on the remote host is prior to 4.15.13 / 4.17.4. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-351-01 advisory.

  - Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov     8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will     issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-     hmac-sha1-96). (CVE-2022-45141)

  - Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability (CVE-2022-37966)

  - Windows Kerberos Elevation of Privilege Vulnerability (CVE-2022-37967)

  - Netlogon RPC Elevation of Privilege Vulnerability (CVE-2022-38023)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0162-1 advisory.

    - CVE-2021-20251: Fixed an issue where the bad password count would       not be properly incremented, which could allow attackers to brute       force a user's password (bsc#1206546).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0222-1 advisory.

    - CVE-2021-20251: Fixed an issue where the bad password count would       not be properly incremented, which could allow attackers to brute       force a user's password (bsc#1206546).
    - CVE-2022-38023: Disabled weak ciphers by default in the Netlogon       Secure channel (bsc#1206504).
    - CVE-2022-37966: Fixed an issue where a weak cipher would be       selected to encrypt session keys, which could lead to privilege       escalation (bsc#1205385).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:2127 advisory.

  - Netlogon RPC Elevation of Privilege Vulnerability (CVE-2022-38023)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the samba packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Netlogon RPC Elevation of Privilege Vulnerability (CVE-2022-38023)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3491 advisory.

    Security Fix(es):

    * kernel: use-after-free caused by l2cap_reassemble_sdu() in net/bluetooth/l2cap_core.c (CVE-2022-3564)

    * kernel: stack overflow in do_proc_dointvec and proc_skip_spaces (CVE-2022-4378)

    * samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided (CVE-2022-38023)

    * kernel: mm/mremap.c use-after-free vulnerability (CVE-2022-41222)

    * kernel: net/ulp: use-after-free in listening ULP sockets (CVE-2023-0461)

    * openvswitch: ip proto 0 triggers incorrect handling (CVE-2023-1668)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Netlogon RPC Elevation of Privilege Vulnerability (CVE-2022-38023)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5936-1 advisory.

    Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A     remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service.
    (CVE-2022-3437)

    Tom Tervoort discovered that Samba incorrectly used weak rc4-hmac Kerberos keys. A remote attacker could     possibly use this issue to elevate privileges. (CVE-2022-37966, CVE-2022-37967)

    It was discovered that Samba supported weak RC4/HMAC-MD5 in NetLogon Secure Channel. A remote attacker     could possibly use this issue to elevate privileges. (CVE-2022-38023)

    Greg Hudson discovered that Samba incorrectly handled PAC parsing. On 32-bit systems, a remote attacker     could use this issue to escalate privileges, or possibly execute arbitrary code. (CVE-2022-42898)

    Joseph Sutton discovered that Samba could be forced to issue rc4-hmac encrypted Kerberos tickets. A remote     attacker could possibly use this issue to escalate privileges. This issue only affected Ubuntu 20.04 LTS     and Ubuntu 22.04 LTS. (CVE-2022-45141)

    WARNING: This update upgrades the version of Samba to 4.15.13. Please see the upstream release notes for     important changes in the new version:

    https://www.samba.org/samba/history/samba-4.15.0.html

    In addition, the security fixes included in this new version introduce several important behavior changes     which may cause compatibility problems interacting with systems still expecting the former behavior.
    Please see the following upstream advisories for more information:

    https://www.samba.org/samba/security/CVE-2022-37966.html     https://www.samba.org/samba/security/CVE-2022-37967.html     https://www.samba.org/samba/security/CVE-2022-38023.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
168899	Slackware Linux 15.0 / current samba Multiple Vulnerabilities (SSA:2022-351-01)	Nessus	Slackware Local Security Checks	2022/12/17	2023/9/15	critical
170719	SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2023:0162-1)	Nessus	SuSE Local Security Checks	2023/1/27	2026/6/26	medium
170944	SUSE SLES15: ctdb / libdcerpc-binding0 / libdcerpc-binding0-32bit / etc (SUSE-SU-2023:0222-1)	Nessus	SuSE Local Security Checks	2023/2/2	2026/6/26	medium
175143	AlmaLinux 9 : samba (ALSA-2023:2127)	Nessus	Alma Linux Local Security Checks	2023/5/5	2023/9/27	high
175317	EulerOS 2.0 SP10 : samba (EulerOS-SA-2023-1829)	Nessus	Huawei Local Security Checks	2023/5/9	2023/9/27	high
176768	RHEL 8 : Red Hat Virtualization Host 4.4.z SP 1 (RHSA-2023:3491)	Nessus	Red Hat Local Security Checks	2023/6/6	2024/11/7	high
178977	EulerOS Virtualization 2.10.1 : samba (EulerOS-SA-2023-2467)	Nessus	Huawei Local Security Checks	2023/7/28	2023/9/26	high
172367	Ubuntu 20.04 LTS : Samba vulnerabilities (USN-5936-1)	Nessus	Ubuntu Local Security Checks	2023/3/9	2025/9/3	critical

检测

插件搜索

critical

medium

medium

high

high

high

high

critical