CVE-2022-37966

Name
CVE-2022-37966
Description
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
NVD Severity
high
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-37966
Patch https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-37966
MISC https://security.gentoo.org/glsa/202309-06

Match rules

CPE URI Source package Min version Max version
cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* windows_server_2008 == None == r2
cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* windows_server_2012 == None == r2
cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* windows_server_2016 == None == -
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* windows_server_2008 == None == -
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* windows_server_2012 == None == -
cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* windows_server_2019 == None == -
cpe:2.3:o:microsoft:windows_server_2022:-:*:*:*:*:*:*:* windows_server_2022 == None == -

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
samba 3.15-main 4.15.13-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
samba 3.16-main 4.15.13-r0 Natanael Copa <ncopa@alpinelinux.org> fixed