CVE Tracker

CVE-2022-38023 @ Saiph

Status
accepted_risk
Priority
3.21
Match score
4.0
Risk
PrivEsc MemCorrupt Remote priv:admin
CVSS
8.1 HIGH
Reason
cpe: samba; pkgs: samba, samba-common, samba-common-bin, samba-dsdb-modules, samba-libs, samba-vfs-modules; version: in-range: samba-4.9.5+dfsg-5+deb10u5, samba-4.9.5+dfsg-5+deb10u5, samba-common-4.9.5+dfsg-5+deb10u5, samba-common-bin-4.9.5+dfsg-5+deb10u5, samba-dsdb-modules-4.9.5+dfsg-5+deb10u5, samba-libs-4.9.5+dfsg-5+deb10u5; risk:priv_esc; remote
Created
2026-08-11T10:15:46Z
Updated
2026-08-22T10:16:15Z
Closed
2026-08-11T15:30:56Z

Package interrogation (copy)

Run on the host — click to copy a command. Debian/apt

PackageCommands
samba-4.9.5+dfsg-5+deb10u5
samba-common-4.9.5+dfsg-5+deb10u5
samba-common-bin-4.9.5+dfsg-5+deb10u5
samba-dsdb-modules-4.9.5+dfsg-5+deb10u5
samba-libs-4.9.5+dfsg-5+deb10u5
samba-vfs-modules

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Clear

Suggestions: samba · samba-common · samba-common-bin · samba-dsdb-modules · samba-libs · samba-vfs-modules

SystemMatchesTicket for CVE-2022-38023
Archive samba-common-bin 2:4.9.5+dfsg-5+deb10u5 accepted_risk open
Bullseye samba-common-bin 2:4.13.13+dfsg-1~deb11u8 accepted_risk open
Library samba-common-bin 2:4.5.16+dfsg-1+deb9u4 accepted_risk open
Saiph samba-common-bin 2:4.9.5+dfsg-5+deb10u5 accepted_risk open
Matrix samba-common-bin 2:4.17.12+dfsg-0+deb12u4 none

Same product CVEs in your queue

Other tickets that look like the same product (from match reason). Relate them here to triage this CVE as the primary.

CVECVSSKEVSystemsStatus MatchedAlready related
CVE-2026-4408 9.0 Archive, Library, Saiph new samba-common-bin —
CVE-2022-37966 8.1 Archive, Bullseye, Library, Saiph accepted_risk samba-common-bin —
CVE-2026-3644 7.5 Library accepted_risk samba —
CVE-2026-4224 7.5 Library accepted_risk samba —
CVE-2026-7210 7.5 Library accepted_risk samba → CVE-2026-15308
CVE-2026-15308 7.5 Library accepted_risk samba —
CVE-2022-37967 7.2 Archive, Bullseye, Library, Saiph not_applicable samba-common-bin → CVE-2022-37966

Related CVE (same fix)

Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.

Host OS / kernel

OS
Debian GNU/Linux 10 (buster) (10) · debian
Arch
x86_64
kernel_release
uname -r → 4.19.0-27-amd64
kernel_version
uname -v → #1 SMP Debian 4.19.316-1 (2024-06-25)

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Same CVE on other hosts

Open the ticket for this CVE on another system.

System Status Priority Updated
Library accepted_risk 4.43 2026-08-22T10:16:15Z Open
Archive accepted_risk 3.21 2026-08-22T10:16:15Z Open
Bullseye accepted_risk 3.21 2026-08-22T10:16:15Z Open

Description

Netlogon RPC Elevation of Privilege Vulnerability

Determination

Vulnerability: Weak RC4/HMAC-MD5 in Netlogon Secure Channel
Impact: Elevation of privilege / man-in-the-middle on Netlogon traffic
Affected: All Samba versions that support Netlogon with RC4 (essentially all versions prior to the 2022/2023 fixes)
Fixed upstream: 4.15.13 / 4.16.8 / 4.17.4
Practical notes / Mitigation
Even without upgrading you can mitigate the issue by forcing rejection of MD5-based Netlogon:

ini# In /etc/samba/smb.conf
[global]
    reject md5 clients = yes
    reject md5 servers = yes

Then restart Samba:
Bash: 
systemctl restart smbd nmbd winbind
No public access

Update status

Also apply to other systems with this CVE:

Add note only

Also add note on:

Mitigation log

2026-08-11T15:21:52Z — affects
Vulnerability: Weak RC4/HMAC-MD5 in Netlogon Secure Channel Impact: Elevation of privilege / man-in-the-middle on Netlogon traffic Affected: All Samba versions that support Netlogon with RC4 (essentially all versions prior to the 2022/2023 fixes) Fixed upstream: 4.15.13 / 4.16.8 / 4.17.4
2026-08-11T15:23:16Z — mitigating
Practical notes / Mitigation Even without upgrading you can mitigate the issue by forcing rejection of MD5-based Netlogon: ini# In /etc/samba/smb.conf [global] reject md5 clients = yes reject md5 servers = yes Then restart Samba: Bash: systemctl restart smbd nmbd winbind
2026-08-11T15:30:56Z — accepted_risk
No public access

References

NVD: CVE-2022-38023