| Package | Affected versions | Patched versions |
|---|---|---|
| samba | ≥ 4.16.0, < 4.16.8< 4.15.13 | 4.16.84.15.13 |
Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free