CVE-2022-37966: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.17.12+dfsg-0+deb12u4Fixed in 2:4.22.11+dfsg-0+deb13u1Fixed in 2:4.22.10+dfsg-0+deb13u2Fixed in 2:4.25.1+dfsg-1 - Upgrade
Upgrade
alpine/sambato a version that resolves this vulnerability.Fixed in 4.15.13-r0 - Upgrade
Upgrade
debian/sambato a version that resolves this vulnerability.Fixed in 2:4.17.4+dfsg-1
Event History
Frequently Asked Questions
What is CVE-2022-37966?
CVE-2022-37966 is a Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability.
How severe is CVE-2022-37966?
CVE-2022-37966 has a severity value of 8.1, which is considered critical.
Which software is affected by CVE-2022-37966?
The software affected by CVE-2022-37966 includes Microsoft Windows Server 2008, 2008 R2, 2012, 2012 R2, 2016, 2019, and 2022, as well as Fedora, Netapp Management Services, and Samba.
How can I fix CVE-2022-37966 on Windows Server 2008?
To fix CVE-2022-37966 on Windows Server 2008, you can apply the security patches provided by Microsoft. Please refer to the Microsoft support page for more information.
Where can I find more information about CVE-2022-37966?
You can find more information about CVE-2022-37966 on the Microsoft Security Response Center website and the Gentoo Security Advisory.