# CVE-2022-0336: samba: The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not...

CVE-2022-0336 is fixed in 63 products on 1 platform, first by ctdb 2:4.13.17~dfsg-0ubuntu0.21.04.1, released January 30, 2022. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2022-0336
- Priority: High
- CVSS: 8.8 (high)
- EPSS: 0.0176
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jan 30, 2022

## Description

The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypassed if an account modification re-adds an SPN that was previously present on that account, such as one added when a computer is joined to a domain. An attacker who has the ability to write to an account can exploit this to perform a denial-of-service attack by adding an SPN that matches an existing service. Additionally, an attacker who can intercept traffic can impersonate existing services, resulting in a loss of confidentiality and integrity.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | ctdb Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [ctdb 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-ctdb-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | libnetapi amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | libnetapi-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | libnetapi-devel amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | libnss-winbind Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [libnss-winbind 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libnss-winbind-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | libpam-winbind Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [libpam-winbind 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libpam-winbind-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | libsmbclient Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [libsmbclient 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libsmbclient-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | libsmbclient amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | libsmbclient-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | libsmbclient-devel amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | libwbclient amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | libwbclient-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | libwbclient-devel amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | libwbclient0 Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [libwbclient0 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libwbclient0-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | python3-samba Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [python3-samba 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-python3-samba-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | python3-samba amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | python3-samba-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | python3-samba-devel amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | python3-samba-test amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | registry-tools Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [registry-tools 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-registry-tools-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | samba Debian 12.15 (bookworm) | 2:4.16.0+dfsg-2 | [DEBIAN-CVE-2022-0336](https://patchblox.com/security/data/fix/linux/debian-cve-2022-0336.md) | Aug 29, 2022 |
| Linux | samba Debian 13.5 (trixie) | 2:4.16.0+dfsg-2 | [DEBIAN-CVE-2022-0336](https://patchblox.com/security/data/fix/linux/debian-cve-2022-0336.md) | Aug 29, 2022 |
| Linux | samba Debian 14 | 2:4.16.0+dfsg-2 | [DEBIAN-CVE-2022-0336](https://patchblox.com/security/data/fix/linux/debian-cve-2022-0336.md) | Aug 29, 2022 |
| Linux | samba Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [samba 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-samba-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | samba amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-client amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-client-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-client-libs amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-client-libs-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-common Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [samba-common 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-samba-common-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | samba-common amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-common-bin Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [samba-common-bin 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-samba-common-bin-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | samba-common-libs amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-common-libs-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-common-tools amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-common-tools-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-dc-libs amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-dc-libs-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-dcerpc amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-dcerpc-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-debugsource amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-devel amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-dsdb-modules Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [samba-dsdb-modules 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-samba-dsdb-modules-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | samba-krb5-printing amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-krb5-printing-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-ldb-ldap-modules amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-ldb-ldap-modules-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-libs Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [samba-libs 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-samba-libs-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | samba-libs amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-libs-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-pidl amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-test amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-test-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-test-libs amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-test-libs-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-testsuite Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [samba-testsuite 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-samba-testsuite-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | samba-usershares amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-vfs-iouring amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-vfs-iouring-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-vfs-modules Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [samba-vfs-modules 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-samba-vfs-modules-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | samba-winbind amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-winbind-clients amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-winbind-clients-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-winbind-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-winbind-krb5-locator amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-winbind-krb5-locator-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-winbind-modules amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | samba-winbind-modules-debuginfo amzn 2023 | 2:4.17.5-0.amzn2023.0.2 | [ALAS2023-2023-032](https://patchblox.com/security/data/fix/linux/alas2023-2023-032.md) | Feb 17, 2023 |
| Linux | smbclient Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [smbclient 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-smbclient-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |
| Linux | winbind Ubuntu 20.04 LTS (focal) | 2:4.13.17~dfsg-0ubuntu0.21.04.1 | [winbind 2:4.13.17~dfsg-0ubuntu0.21.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-winbind-2-4.13.17-dfsg-0ubuntu0.21.04.1.md) | Jan 30, 2022 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.