{
  "fix": "ALAS2023-2023-032",
  "url": "https://patchblox.com/security/fix/linux/alas2023-2023-032",
  "summary": "ALAS2023-2023-032, released February 17, 2023, fixes 16 CVEs across 52 products. None of them is reported as exploited. Patch Radar priority: Urgent.",
  "platform": "linux",
  "type": "advisory",
  "title": "Security update for 52 packages",
  "released": "2023-02-17T20:44:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2022-37967, exploitation more likely",
  "supported": true,
  "cveCount": 16,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.13794,
  "maxCvss": 9.8,
  "vendorAdvisory": "https://alas.aws.amazon.com/AL2023/ALAS-2023-032.html",
  "appliesTo": [
    {
      "product": "libnetapi",
      "productUrl": "https://patchblox.com/security/product/linux/libnetapi",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "libnetapi-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/libnetapi-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "libnetapi-devel",
      "productUrl": "https://patchblox.com/security/product/linux/libnetapi-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "libsmbclient",
      "productUrl": "https://patchblox.com/security/product/linux/libsmbclient",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "libsmbclient-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/libsmbclient-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "libsmbclient-devel",
      "productUrl": "https://patchblox.com/security/product/linux/libsmbclient-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "libwbclient",
      "productUrl": "https://patchblox.com/security/product/linux/libwbclient",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "libwbclient-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/libwbclient-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "libwbclient-devel",
      "productUrl": "https://patchblox.com/security/product/linux/libwbclient-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "python3-samba",
      "productUrl": "https://patchblox.com/security/product/linux/python3-samba",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "python3-samba-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/python3-samba-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "python3-samba-devel",
      "productUrl": "https://patchblox.com/security/product/linux/python3-samba-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "python3-samba-test",
      "productUrl": "https://patchblox.com/security/product/linux/python3-samba-test",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba",
      "productUrl": "https://patchblox.com/security/product/linux/samba",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-client",
      "productUrl": "https://patchblox.com/security/product/linux/samba-client",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-client-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-client-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-client-libs",
      "productUrl": "https://patchblox.com/security/product/linux/samba-client-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-client-libs-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-client-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-common",
      "productUrl": "https://patchblox.com/security/product/linux/samba-common",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-common-libs",
      "productUrl": "https://patchblox.com/security/product/linux/samba-common-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-common-libs-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-common-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-common-tools",
      "productUrl": "https://patchblox.com/security/product/linux/samba-common-tools",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-common-tools-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-common-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-dc-libs",
      "productUrl": "https://patchblox.com/security/product/linux/samba-dc-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-dc-libs-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-dc-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-dcerpc",
      "productUrl": "https://patchblox.com/security/product/linux/samba-dcerpc",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-dcerpc-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-dcerpc-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-debugsource",
      "productUrl": "https://patchblox.com/security/product/linux/samba-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-devel",
      "productUrl": "https://patchblox.com/security/product/linux/samba-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-krb5-printing",
      "productUrl": "https://patchblox.com/security/product/linux/samba-krb5-printing",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-krb5-printing-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-krb5-printing-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-ldb-ldap-modules",
      "productUrl": "https://patchblox.com/security/product/linux/samba-ldb-ldap-modules",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-ldb-ldap-modules-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-ldb-ldap-modules-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-libs",
      "productUrl": "https://patchblox.com/security/product/linux/samba-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-libs-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-pidl",
      "productUrl": "https://patchblox.com/security/product/linux/samba-pidl",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-test",
      "productUrl": "https://patchblox.com/security/product/linux/samba-test",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-test-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-test-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-test-libs",
      "productUrl": "https://patchblox.com/security/product/linux/samba-test-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-test-libs-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-test-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-usershares",
      "productUrl": "https://patchblox.com/security/product/linux/samba-usershares",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-vfs-iouring",
      "productUrl": "https://patchblox.com/security/product/linux/samba-vfs-iouring",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-vfs-iouring-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-vfs-iouring-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-winbind",
      "productUrl": "https://patchblox.com/security/product/linux/samba-winbind",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-winbind-clients",
      "productUrl": "https://patchblox.com/security/product/linux/samba-winbind-clients",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-winbind-clients-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-winbind-clients-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-winbind-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-winbind-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-winbind-krb5-locator",
      "productUrl": "https://patchblox.com/security/product/linux/samba-winbind-krb5-locator",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-winbind-krb5-locator-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-winbind-krb5-locator-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-winbind-modules",
      "productUrl": "https://patchblox.com/security/product/linux/samba-winbind-modules",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    },
    {
      "product": "samba-winbind-modules-debuginfo",
      "productUrl": "https://patchblox.com/security/product/linux/samba-winbind-modules-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.5-0.amzn2023.0.2",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2022-37967",
      "url": "https://patchblox.com/security/cve/CVE-2022-37967",
      "title": "Windows Kerberos Elevation of Privilege Vulnerability",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 7.2,
      "epss": 0.04818,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-37966",
      "url": "https://patchblox.com/security/cve/CVE-2022-37966",
      "title": "Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.1,
      "epss": 0.02936,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-38023",
      "url": "https://patchblox.com/security/cve/CVE-2022-38023",
      "title": "Netlogon RPC Elevation of Privilege Vulnerability",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.02749,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-17049",
      "url": "https://patchblox.com/security/cve/CVE-2020-17049",
      "title": "Kerberos KDC Security Feature Bypass Vulnerability",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.2,
      "epss": 0.13794,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-3592",
      "url": "https://patchblox.com/security/cve/CVE-2022-3592",
      "title": "libnetapi: Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities:\nCVE-2022-45141:\n\tSamba AD...",
      "priority": "High",
      "severity": "important",
      "epss": 0.02712,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-2124",
      "url": "https://patchblox.com/security/cve/CVE-2016-2124",
      "title": "ctdb: A flaw was found in the way samba implemented SMB1 authentication",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.01766,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-0336",
      "url": "https://patchblox.com/security/cve/CVE-2022-0336",
      "title": "samba: The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not...",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01755,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32743",
      "url": "https://patchblox.com/security/cve/CVE-2022-32743",
      "title": "samba: Samba does not validate the Validated-DNS-Host-Name right for the dNSHostName attribute which could permit unprivileg...",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.01571,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45141",
      "url": "https://patchblox.com/security/cve/CVE-2022-45141",
      "title": "samba-common: Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and...",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00454,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-3437",
      "url": "https://patchblox.com/security/cve/CVE-2022-3437",
      "title": "Heimdal: A user in a privileged network position may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.03827,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32746",
      "url": "https://patchblox.com/security/cve/CVE-2022-32746",
      "title": "samba: A flaw was found in the Samba AD LDAP server",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.4,
      "epss": 0.01318,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32742",
      "url": "https://patchblox.com/security/cve/CVE-2022-32742",
      "title": "ctdb: A flaw was found in Samba",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.3,
      "epss": 0.01306,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-44141",
      "url": "https://patchblox.com/security/cve/CVE-2021-44141",
      "title": "ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.5,
      "epss": 0.01088,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-20316",
      "url": "https://patchblox.com/security/cve/CVE-2021-20316",
      "title": "ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil...",
      "priority": "Routine",
      "severity": "Moderate",
      "cvss": 6.8,
      "epss": 0.01042,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-1615",
      "url": "https://patchblox.com/security/cve/CVE-2022-1615",
      "title": "ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil...",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 5.5,
      "epss": 0.00526,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-43566",
      "url": "https://patchblox.com/security/cve/CVE-2021-43566",
      "title": "ctdb: All versions of Samba prior to 4.13.16 are vulnerable to a malicious clientusing an SMB1 or NFS race to allow a direc...",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 2.6,
      "epss": 0.00405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}