CVE catalog

CVE-2022-37966

samba: CVE-2022-37966

Severity: High · CVSS 8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: Nov 9, 2022, 10:15:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 2.53% · Oct 22, 2026

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	samba	sid	`2:4.25.0+dfsg-1`	fixed
Debian	samba	forky	`2:4.25.0+dfsg-1`	fixed
Debian	samba	trixie	`2:4.22.11+dfsg-0+deb13u1`	fixed
Debian	samba	trixie-security	`2:4.22.10+dfsg-0+deb13u2`	fixed
Debian	samba	bookworm	`2:4.17.12+dfsg-0+deb12u4`	fixed
Debian	samba	bookworm-security	`2:4.17.12+dfsg-0+deb12u4`	fixed
Ubuntu	samba	pro	`2:4.6.7+dfsg-1ubuntu3`	vulnerable
Ubuntu	samba	pro	`2:4.7.1+dfsg-1ubuntu1`	vulnerable
Ubuntu	samba	pro	`2:4.7.3+dfsg-1ubuntu1`	vulnerable
Ubuntu	samba	pro	`2:4.7.4+dfsg-1ubuntu1`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu1`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.2`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.4`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.5`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.6`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.7`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.9`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.10`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.11`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.13`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.14`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.15`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.16`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.17`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.18`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.19`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.20`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.21`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.23`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.24`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.26`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.27`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.28`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.29`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2`	vulnerable
Ubuntu	samba	pro	`2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3`	vulnerable
Ubuntu	samba	20.04	`2:4.10.7+dfsg-0ubuntu2`	vulnerable
Ubuntu	samba	20.04	`2:4.10.7+dfsg-0ubuntu3`	vulnerable
Ubuntu	samba	20.04	`2:4.11.1+dfsg-3ubuntu1`	vulnerable
Ubuntu	samba	20.04	`2:4.11.1+dfsg-3ubuntu2`	vulnerable
Ubuntu	samba	20.04	`2:4.11.1+dfsg-3ubuntu4`	vulnerable
Ubuntu	samba	20.04	`2:4.11.5+dfsg-1ubuntu1`	vulnerable
Ubuntu	samba	20.04	`2:4.11.5+dfsg-1ubuntu2`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1.1`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1.2`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1.3`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1.4`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1.5`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1.6`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1.8`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1.9`	vulnerable
Ubuntu	samba	20.04	`2:4.11.6+dfsg-0ubuntu1.10`	vulnerable
Ubuntu	samba	20.04	`2:4.13.14+dfsg-0ubuntu0.20.04.1`	vulnerable
Ubuntu	samba	20.04	`2:4.13.14+dfsg-0ubuntu0.20.04.2`	vulnerable
Ubuntu	samba	20.04	`2:4.13.14+dfsg-0ubuntu0.20.04.3`	vulnerable
Ubuntu	samba	20.04	`2:4.13.14+dfsg-0ubuntu0.20.04.4`	vulnerable
Ubuntu	samba	20.04	`2:4.13.17~dfsg-0ubuntu0.21.04.1`	vulnerable
Ubuntu	samba	20.04	`2:4.13.17~dfsg-0ubuntu0.21.04.2`	vulnerable
Ubuntu	samba	20.04	`2:4.13.17~dfsg-0ubuntu1.20.04.1`	vulnerable
Ubuntu	samba	20.04	`2:4.13.17~dfsg-0ubuntu1.20.04.2`	vulnerable
Ubuntu	samba	20.04	`2:4.13.17~dfsg-0ubuntu1.20.04.4`	vulnerable
Ubuntu	samba	20.04	`2:4.13.17~dfsg-0ubuntu1.20.04.5`	vulnerable
Ubuntu	samba	20.04	`2:4.15.13+dfsg-0ubuntu0.20.04.1`	fixed
Ubuntu	samba	22.04	`2:4.13.5+dfsg-2ubuntu2`	vulnerable
Ubuntu	samba	22.04	`2:4.13.5+dfsg-2ubuntu3`	vulnerable
Ubuntu	samba	22.04	`2:4.13.14+dfsg-0ubuntu1`	vulnerable
Ubuntu	samba	22.04	`2:4.13.14+dfsg-0ubuntu2`	vulnerable
Ubuntu	samba	22.04	`2:4.15.5~dfsg-0ubuntu1`	vulnerable
Ubuntu	samba	22.04	`2:4.15.5~dfsg-0ubuntu2`	vulnerable
Ubuntu	samba	22.04	`2:4.15.5~dfsg-0ubuntu4`	vulnerable
Ubuntu	samba	22.04	`2:4.15.5~dfsg-0ubuntu5`	vulnerable
Ubuntu	samba	22.04	`2:4.15.5~dfsg-0ubuntu5.1`	vulnerable
Ubuntu	samba	22.04	`2:4.15.9+dfsg-0ubuntu0.2`	vulnerable
Ubuntu	samba	22.04	`2:4.15.9+dfsg-0ubuntu0.3`	vulnerable
Ubuntu	samba	22.04	`2:4.15.13+dfsg-0ubuntu1`	fixed
Opensuse	samba	tumbleweed	`4.17.4+git.300.305b22bfce-1.1`	fixed
Suse	samba	linux enterprise module for basesystem 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	linux enterprise module for python 2 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	linux enterprise high availability extension 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	linux enterprise high performance computing 15 sp3-espos	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	linux enterprise high performance computing 15 sp3-ltss	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	linux enterprise real time 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	linux enterprise server 15 sp3-ltss	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	linux enterprise server for sap applications 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	manager proxy 4.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	manager retail branch server 4.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	manager server 4.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	linux enterprise micro 5.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Suse	samba	enterprise storage 7.1	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed
Opensuse	samba	leap micro 5.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	samba	source	sid	`2:4.17.4+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	samba	source	forky	`2:4.17.4+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	samba	source	trixie	`2:4.17.4+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	samba	source	bookworm	`2:4.17.4+dfsg-1`	not yet assigned	Not reported	Not reported
Ubuntu	samba	deb	20.04	`2:4.15.13+dfsg-0ubuntu0.20.04.1`	Not reported	UBUNTU-CVE-2022-37966	Not reported
Ubuntu	samba	deb	22.04	`2:4.15.13+dfsg-0ubuntu1`	Not reported	UBUNTU-CVE-2022-37966	Not reported
Opensuse	samba	rpm	tumbleweed	`4.17.4+git.300.305b22bfce-1.1`	Not reported	OPENSUSE-SU-2024:12587-1	Not reported
Suse	samba	rpm	linux enterprise module for basesystem 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	linux enterprise module for python 2 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	linux enterprise high availability extension 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	linux enterprise high performance computing 15 sp3-espos	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	linux enterprise high performance computing 15 sp3-ltss	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	linux enterprise real time 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	linux enterprise server 15 sp3-ltss	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	linux enterprise server for sap applications 15 sp3	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	manager proxy 4.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	manager retail branch server 4.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	manager server 4.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	linux enterprise micro 5.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Suse	samba	rpm	enterprise storage 7.1	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported
Opensuse	samba	rpm	leap micro 5.2	`4.15.13+git.540.fab3b2a46c6-150300.3.46.1`	Not reported	SUSE-SU-2023:0014-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[ctdb]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[ctdb-pcp-pmda]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[ldb-tools]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[libldb2]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[libldb2-32bit]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[libldb-devel]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[python3-ldb]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[python3-ldb-32bit]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-ad-dc]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-ad-dc-libs]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-ad-dc-libs-32bit]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-ceph]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-client]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-client-32bit]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-client-lang]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · noarch · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-client-libs]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-client-libs-32bit]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-dcerpc]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-devel]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed
[samba-devel-32bit]Unknown
Source package: [samba]
Details (1)
- 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 4.17.4+git.300.305b22bfce-1.1
  Version impact unknown
  dsa · samba · opensuse · tumbleweed

Next results

Observed: Oct 23, 2026, 6:29:04 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]