Skip to content
Fencer Vulns
high 8.1

CVE-2022-38023 json

Netlogon RPC Elevation of Privilege Vulnerability

published 2022-11-09 4 y ago modified 2026-08-10 2 mo ago also EUVD-2022-40629

cvss
8.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
2.7%
EPSS 2.7% chance of exploitation in 30 days, percentile 86%
public exploits
0
none known

Summary

Netlogon RPC Elevation of Privilege Vulnerability

Patch / fix

  • Microsoft Windows Server 2008 Service Pack 2 6.0.6003.22175
  • Microsoft Windows Server 2008 R2 Service Pack 1 6.1.7601.26623
  • Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1.7601.26623
  • Microsoft Windows Server 2008 Service Pack 2 6.0.6003.22175
  • Microsoft Windows Server 2008 Service Pack 2 (Server Core installation) 6.0.6003.22175
  • Microsoft Windows Server 2012 6.2.9200.24374
  • Microsoft Windows Server 2012 (Server Core installation) 6.2.9200.24374
  • Microsoft Windows Server 2012 R2 6.3.9600.21063
  • Microsoft Windows Server 2012 R2 (Server Core installation) 6.3.9600.21063
  • Microsoft Windows Server 2016 10.0.14393.6085
  • Microsoft Windows Server 2016 (Server Core installation) 10.0.14393.6085
  • Microsoft Windows Server 2019 10.0.17763.4645
  • Microsoft Windows Server 2019 (Server Core installation) 10.0.17763.4645
  • Microsoft Windows Server 2022 10.0.20348.1850
  • samba Debian 14, Debian 13, Debian 12 2:4.17.4+dfsg-1

debian advisories DEBIAN-CVE-2022-38023

  • samba Ubuntu 20.04 LTS 2:4.15.13+dfsg-0ubuntu0.20.04.1
  • samba Ubuntu 22.04 LTS 2:4.15.13+dfsg-0ubuntu1

ubuntu advisories UBUNTU-CVE-2022-38023

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • redhat-virtualization-host rhev hypervisor 4.4 4.5.3-202306050942_8.6
  • redhat-virtualization-host-image-update rhev hypervisor 4.4 4.5.3-202306050942_8.6
  • samba rhev hypervisor 4.4, RHEL 8.6 EUS 4.15.5-12.el8_6
  • libwbclient rhev hypervisor 4.4, RHEL 8.6 EUS 4.15.5-12.el8_6
  • libsmbclient rhev hypervisor 4.4, RHEL 8.6 EUS 4.15.5-12.el8_6
  • samba-common rhev hypervisor 4.4, RHEL 8.6 EUS 4.15.5-12.el8_6
  • samba RHEL 9 4.16.4-103.el9_1
  • ctdb RHEL 9 4.16.4-103.el9_1

red hat advisories RHSA-2023:3491RHSA-2023:2136RHSA-2023:2137RHSA-2023:2127RHSA-2023:1090RHSA-2023:0838

  • samba Enterprise Storage 7 4.13.13+git.616.557146479a-150200.3.21.1
  • samba SLES for SAP 15 SP1, SLES 15 SP1-LTSS, SLE High Performance Computing 15 SP1-LTSS +3 more 4.9.5+git.552.fec1a5e57a-150100.3.73.1
  • samba SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 +1 more 4.15.13+git.534.0d9f8ece26-3.77.1
  • samba SLES for SAP 15 SP2, SLES 15 SP2-LTSS, SLE High Performance Computing 15 SP2-LTSS +3 more 4.11.14+git.384.5dc2c21dce-150200.4.44.1
  • samba SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE Real Time 15 SP3 +9 more 4.15.13+git.591.ab36624310c-150300.3.49.1
  • samba SLE Module for Basesystem 15 SP4, SLE Micro 5.3, SLE High Availability Extension 15 SP4 +2 more 4.15.13+git.591.ab36624310c-150400.3.19.1
  • samba SLES for SAP 12 SP4, SLES 12 SP4-LTSS, SLE High Availability Extension 12 SP4 +2 more 4.6.16+git.384.9fec958bed-3.76.1
  • samba SLES 12 SP2-BCL 4.4.2-38.55.1

suse advisories SUSE-SU-2023:0620-1SUSE-SU-2023:0222-1SUSE-SU-2023:0164-1SUSE-SU-2023:0163-1SUSE-SU-2023:0162-1SUSE-SU-2023:0160-1

  • samba openSUSE Tumbleweed 4.17.4+git.300.305b22bfce-1.1

opensuse advisories openSUSE-SU-2024:12587-1

  • samba AlmaLinux 9 4.16.4-103.el9_1
  • ctdb AlmaLinux 9 4.16.4-103.el9_1
  • samba-libs AlmaLinux 9 4.16.4-103.el9_1
  • samba-pidl AlmaLinux 9 4.16.4-103.el9_1
  • samba-test AlmaLinux 9 4.16.4-103.el9_1
  • libwbclient AlmaLinux 9 4.16.4-103.el9_1
  • libsmbclient AlmaLinux 9 4.16.4-103.el9_1
  • samba-client AlmaLinux 9 4.16.4-103.el9_1

almalinux advisories ALSA-2023:2127ALSA-2023:0838

  • samba Rocky Linux 9 4.16.4-103.el9_1
  • samba Rocky Linux 8 4.16.4-4.el8_7

rocky linux advisories RLSA-2023:2127RLSA-2023:0838

  • samba Alpine 3.16, Alpine 3.15 4.15.13-r0

alpine advisories ALPINE-CVE-2022-38023

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • samba Arch Linux 4.17.5-1

arch linux advisories AVG-2828

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-38023 updated cvss 8.1

samba: RC4/HMAC-MD5 NetLogon Secure Channel is weak and should be avoided

  • Red Hat Enterprise Linux 6 samba, samba-swat, libsmbclient, samba-client, samba-common, samba-winbind, +4 more
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat CodeReady Linux Builder (v. 8) samba-devel 4.16.4-4.el8_7, ctdb-debuginfo 4.16.4-4.el8_7, samba-debuginfo 4.16.4-4.el8_7, libwbclient-devel 4.16.4-4.el8_7, samba-debugsource 4.16.4-4.el8_7, libsmbclient-devel 4.16.4-4.el8_7, +17 more
    fixed: vendor fix RHSA-2023:0838
  • Red Hat CodeReady Linux Builder (v. 9) samba-pidl 4.16.4-103.el9_1, samba-test 4.16.4-103.el9_1, samba-test-libs 4.16.4-103.el9_1
    fixed: vendor fix RHSA-2023:2127
  • Red Hat CodeReady Linux Builder EUS (v.8.6) samba-devel 4.15.5-12.el8_6, ctdb-debuginfo 4.15.5-12.el8_6, samba-debuginfo 4.15.5-12.el8_6, libwbclient-devel 4.15.5-12.el8_6, samba-debugsource 4.15.5-12.el8_6, libsmbclient-devel 4.15.5-12.el8_6, +17 more
    fixed: vendor fix RHSA-2023:2136
  • Red Hat CodeReady Linux Builder EUS (v.9.0) samba-pidl 4.15.5-110.el9_0, samba-test 4.15.5-110.el9_0, samba-test-libs 4.15.5-110.el9_0
    fixed: vendor fix RHSA-2023:2137
  • Red Hat Enterprise Linux AppStream (v. 8) samba-vfs-iouring 4.16.4-4.el8_7
    fixed: vendor fix RHSA-2023:0838
  • Red Hat Enterprise Linux AppStream (v. 9) samba-client 4.16.4-103.el9_1, samba-winexe 4.16.4-103.el9_1, samba-vfs-iouring 4.16.4-103.el9_1, samba-krb5-printing 4.16.4-103.el9_1, samba-winbind-clients 4.16.4-103.el9_1, samba-winbind-krb5-locator 4.16.4-103.el9_1
    fixed: vendor fix RHSA-2023:2127
  • Red Hat Enterprise Linux AppStream E4S (v. 8.1) samba-test 4.10.4-107.el8_1
    fixed: vendor fix RHSA-2023:0639
show 18 more
  • Red Hat Enterprise Linux AppStream EUS (v.8.6) samba-vfs-iouring 4.15.5-12.el8_6
    fixed: vendor fix RHSA-2023:2136
  • Red Hat Enterprise Linux AppStream EUS (v.9.0) samba-client 4.15.5-110.el9_0, samba-winexe 4.15.5-110.el9_0, samba-vfs-iouring 4.15.5-110.el9_0, samba-krb5-printing 4.15.5-110.el9_0, samba-winbind-clients 4.15.5-110.el9_0, samba-winbind-krb5-locator 4.15.5-110.el9_0
    fixed: vendor fix RHSA-2023:2137
  • Red Hat Enterprise Linux BaseOS (v. 8) ctdb 4.16.4-4.el8_7, samba 4.16.4-4.el8_7, samba-libs 4.16.4-4.el8_7, samba-pidl 4.16.4-4.el8_7, samba-test 4.16.4-4.el8_7, libwbclient 4.16.4-4.el8_7, +15 more
    fixed: vendor fix RHSA-2023:0838
  • Red Hat Enterprise Linux BaseOS (v. 9) samba 4.16.4-103.el9_1, samba-libs 4.16.4-103.el9_1, libwbclient 4.16.4-103.el9_1, libsmbclient 4.16.4-103.el9_1, samba-common 4.16.4-103.el9_1, python3-samba 4.16.4-103.el9_1, +5 more
    fixed: vendor fix RHSA-2023:2127
  • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) ctdb 4.11.2-22.el8_2, samba 4.11.2-22.el8_2, ctdb-tests 4.11.2-22.el8_2, samba-libs 4.11.2-22.el8_2, samba-pidl 4.11.2-22.el8_2, samba-test 4.11.2-22.el8_2, +15 more
    fixed: vendor fix RHSA-2023:0638
  • Red Hat Enterprise Linux BaseOS E4S (v. 8.1) ctdb 4.10.4-107.el8_1, samba 4.10.4-107.el8_1, ctdb-tests 4.10.4-107.el8_1, samba-libs 4.10.4-107.el8_1, samba-pidl 4.10.4-107.el8_1, libwbclient 4.10.4-107.el8_1, +14 more
    fixed: vendor fix RHSA-2023:0639
  • Red Hat Enterprise Linux BaseOS E4S (v. 8.2) ctdb 4.11.2-22.el8_2, samba 4.11.2-22.el8_2, ctdb-tests 4.11.2-22.el8_2, samba-libs 4.11.2-22.el8_2, samba-pidl 4.11.2-22.el8_2, samba-test 4.11.2-22.el8_2, +15 more
    fixed: vendor fix RHSA-2023:0638
  • Red Hat Enterprise Linux BaseOS EUS (v.8.4) ctdb 4.13.3-11.el8_4, samba 4.13.3-11.el8_4, ctdb-tests 4.13.3-11.el8_4, samba-libs 4.13.3-11.el8_4, samba-pidl 4.13.3-11.el8_4, samba-test 4.13.3-11.el8_4, +16 more
    fixed: vendor fix RHSA-2023:0637
  • Red Hat Enterprise Linux BaseOS EUS (v.8.6) ctdb 4.15.5-12.el8_6, samba 4.15.5-12.el8_6, samba-libs 4.15.5-12.el8_6, samba-pidl 4.15.5-12.el8_6, samba-test 4.15.5-12.el8_6, libwbclient 4.15.5-12.el8_6, +15 more
    fixed: vendor fix RHSA-2023:2136
  • Red Hat Enterprise Linux BaseOS EUS (v.9.0) samba 4.15.5-110.el9_0, samba-libs 4.15.5-110.el9_0, libwbclient 4.15.5-110.el9_0, libsmbclient 4.15.5-110.el9_0, samba-common 4.15.5-110.el9_0, python3-samba 4.15.5-110.el9_0, +5 more
    fixed: vendor fix RHSA-2023:2137
  • Red Hat Enterprise Linux BaseOS TUS (v. 8.2) ctdb 4.11.2-22.el8_2, samba 4.11.2-22.el8_2, ctdb-tests 4.11.2-22.el8_2, samba-libs 4.11.2-22.el8_2, samba-pidl 4.11.2-22.el8_2, samba-test 4.11.2-22.el8_2, +15 more
    fixed: vendor fix RHSA-2023:0638
  • Red Hat Enterprise Linux Client (v. 7) samba 4.10.16-24.el7_9, samba-libs 4.10.16-24.el7_9, libwbclient 4.10.16-24.el7_9, libsmbclient 4.10.16-24.el7_9, samba-client 4.10.16-24.el7_9, samba-common 4.10.16-24.el7_9, +7 more Red Hat Enterprise Linux Client Optional (v. 7) samba 4.10.16-24.el7_9, samba-dc 4.10.16-24.el7_9, samba-pidl 4.10.16-24.el7_9, samba-test 4.10.16-24.el7_9, samba-python 4.10.16-24.el7_9, samba-dc-libs 4.10.16-24.el7_9, +4 more Red Hat Enterprise Linux ComputeNode Optional (v. 7) samba 4.10.16-24.el7_9, samba-dc 4.10.16-24.el7_9, samba-pidl 4.10.16-24.el7_9, samba-test 4.10.16-24.el7_9, samba-python 4.10.16-24.el7_9, samba-dc-libs 4.10.16-24.el7_9, +5 more
    fixed: vendor fix RHSA-2023:1090
  • Red Hat Enterprise Linux CRB EUS (v.8.4) samba-devel 4.13.3-11.el8_4, ctdb-debuginfo 4.13.3-11.el8_4, samba-debuginfo 4.13.3-11.el8_4, libwbclient-devel 4.13.3-11.el8_4, samba-debugsource 4.13.3-11.el8_4, libsmbclient-devel 4.13.3-11.el8_4, +18 more
    fixed: vendor fix RHSA-2023:0637
  • Red Hat Enterprise Linux Resilient Storage (v. 9) ctdb 4.16.4-103.el9_1
    fixed: vendor fix RHSA-2023:2127
  • Red Hat Enterprise Linux Resilient Storage EUS (v.9.0) ctdb 4.15.5-110.el9_0
    fixed: vendor fix RHSA-2023:2137
  • Red Hat Enterprise Linux Server (v. 7) samba 4.10.16-24.el7_9, samba-libs 4.10.16-24.el7_9, libwbclient 4.10.16-24.el7_9, libsmbclient 4.10.16-24.el7_9, samba-client 4.10.16-24.el7_9, samba-common 4.10.16-24.el7_9, +8 more Red Hat Enterprise Linux Server Optional (v. 7) samba-dc 4.10.16-24.el7_9, samba-pidl 4.10.16-24.el7_9, samba-test 4.10.16-24.el7_9, samba-python 4.10.16-24.el7_9, samba-dc-libs 4.10.16-24.el7_9, samba-test-libs 4.10.16-24.el7_9, +3 more Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb 4.10.16-24.el7_9, ctdb-tests 4.10.16-24.el7_9 Red Hat Enterprise Linux Workstation (v. 7) samba 4.10.16-24.el7_9, samba-libs 4.10.16-24.el7_9, libwbclient 4.10.16-24.el7_9, libsmbclient 4.10.16-24.el7_9, samba-client 4.10.16-24.el7_9, samba-common 4.10.16-24.el7_9, +8 more Red Hat Enterprise Linux Workstation Optional (v. 7) samba-dc 4.10.16-24.el7_9, samba-pidl 4.10.16-24.el7_9, samba-test 4.10.16-24.el7_9, samba-dc-libs 4.10.16-24.el7_9, samba-test-libs 4.10.16-24.el7_9, samba-python-test 4.10.16-24.el7_9, +2 more
    fixed: vendor fix RHSA-2023:1090
  • Red Hat Virtualization 4 Hypervisor for RHEL 8 samba 4.15.5-12.el8_6, libwbclient 4.15.5-12.el8_6, libsmbclient 4.15.5-12.el8_6, samba-common 4.15.5-12.el8_6, samba-client-libs 4.15.5-12.el8_6, samba-common-libs 4.15.5-12.el8_6, +2 more
    fixed: vendor fix RHSA-2023:2136
  • Red Hat Storage 3 ctdb, samba, samba-dc, ctdb-tests, samba-libs, samba-pidl, +21 more Red Hat RHEL 8-based RHEV-H for RHEV 4 (build requirements) redhat-release-virtualization-host 4.5.3-7.el8ev, redhat-release-virtualization-host-content 4.5.3-7.el8ev, redhat-virtualization-host-image-update-placeholder 4.5.3-7.el8ev
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

2.75% chance of exploitation in the next 30 days, higher than 86% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CNA 3.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Microsoft Windows Server 2008 Service Pack 2
  • Microsoft Windows Server 2008 R2 Service Pack 1
  • Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)
  • Microsoft Windows Server 2008 Service Pack 2
  • Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)
  • Microsoft Windows Server 2012
  • Microsoft Windows Server 2012 (Server Core installation)
  • Microsoft Windows Server 2012 R2
  • Microsoft Windows Server 2012 R2 (Server Core installation)
  • Microsoft Windows Server 2016
  • Microsoft Windows Server 2016 (Server Core installation)
  • Microsoft Windows Server 2019
  • Microsoft Windows Server 2019 (Server Core installation)
  • Microsoft Windows Server 2022

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.