| Package | Affected versions | Patched versions |
|---|---|---|
| samba | ≥ 4.15.0, < 4.15.9≥ 4.16.0, < 4.16.4≥ 4.3.0, < 4.14.14 | 4.15.94.16.44.14.14 |
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free