# winbind 2:4.19.5+dfsg-4ubuntu9: winbind 2:4.19.5+dfsg-4ubuntu9 for Ubuntu 24.10 (oracular) winbind 2:4.19.5+dfsg-4ubuntu9, released October 10, 2023, fixes 25 CVEs in winbind. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported. - Web page: https://patchblox.com/security/fix/linux/ubuntu-oracular-winbind-2-4.19.5-dfsg-4ubuntu9 - Platform: Linux - Released: Oct 10, 2023 - Priority: Urgent (Closes CVE-2022-37967, exploitation more likely) - CVEs: 25, exploited: 0, on CISA KEV: 0 ## Applies to | Product | Release | Fixed in | |---|---|---| | [winbind](https://patchblox.com/security/data/product/linux/winbind.md) | Ubuntu 24.10 (oracular) | 2:4.19.5+dfsg-4ubuntu9 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-37967](https://patchblox.com/security/data/cve/CVE-2022-37967.md) | Urgent | Windows Kerberos Elevation of Privilege Vulnerability | 7.2 | 0.0482 | More likely | | [CVE-2022-37966](https://patchblox.com/security/data/cve/CVE-2022-37966.md) | Urgent | Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability | 8.1 | 0.0294 | More likely | | [CVE-2022-38023](https://patchblox.com/security/data/cve/CVE-2022-38023.md) | Urgent | Netlogon RPC Elevation of Privilege Vulnerability | 8.1 | 0.0275 | More likely | | [CVE-2023-34966](https://patchblox.com/security/data/cve/CVE-2023-34966.md) | High | ctdb: An infinite loop vulnerability was found in Samba's mdssvc RPC service forSpotlight | 7.5 | 0.6240 | | | [CVE-2016-2124](https://patchblox.com/security/data/cve/CVE-2016-2124.md) | High | ctdb: A flaw was found in the way samba implemented SMB1 authentication | 8.1 | 0.0177 | | | [CVE-2022-2127](https://patchblox.com/security/data/cve/CVE-2022-2127.md) | High | ldb-tools: An out-of-bounds read vulnerability was found in Samba due to insufficientlength checks in winbindd_pam_auth_crap.c | 7.5 | 0.0172 | | | [CVE-2020-25717](https://patchblox.com/security/data/cve/CVE-2020-25717.md) | High | libsmbclient0: A flaw was found in the way Samba maps domain users to local users | 8.1 | 0.0167 | | | [CVE-2020-25722](https://patchblox.com/security/data/cve/CVE-2020-25722.md) | High | ctdb: Multiple flaws were found in the way samba AD DC implemented access andconformance checking of stored data | 8.8 | 0.0161 | | | [CVE-2022-2031](https://patchblox.com/security/data/cve/CVE-2022-2031.md) | High | ctdb: A flaw was found in Samba | 8.8 | 0.0135 | | | [CVE-2023-34968](https://patchblox.com/security/data/cve/CVE-2023-34968.md) | High | libnss-winbind: A path disclosure vulnerability was found in Samba | 7.5 | 0.0133 | | | [CVE-2022-32744](https://patchblox.com/security/data/cve/CVE-2022-32744.md) | High | ctdb: A flaw was found in Samba | 8.8 | 0.0126 | | | [CVE-2022-32745](https://patchblox.com/security/data/cve/CVE-2022-32745.md) | High | ctdb: A flaw was found in Samba | 8.1 | 0.0119 | | | [CVE-2022-3437](https://patchblox.com/security/data/cve/CVE-2022-3437.md) | Routine | Heimdal: A user in a privileged network position may be able to leak sensitive user information | 6.5 | 0.0400 | | | [CVE-2019-14907](https://patchblox.com/security/data/cve/CVE-2019-14907.md) | Routine | ctdb: All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.xbefore 4.11.5 have an issue where if it is se... | 6.5 | 0.0315 | | | [CVE-2021-3671](https://patchblox.com/security/data/cve/CVE-2021-3671.md) | Routine | python3-samba: A null pointer de-reference was found in the way samba kerberos serverhandled missing sname in TGS-REQ (Ticket Granti... | n/a | 0.0212 | | | [CVE-2023-42669](https://patchblox.com/security/data/cve/CVE-2023-42669.md) | Routine | samba: A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/... | 6.5 | 0.0194 | | | [CVE-2019-14902](https://patchblox.com/security/data/cve/CVE-2019-14902.md) | Routine | ctdb: There is an issue in all samba 4.11.x versions before 4.11.5, all samba4.10.x versions before 4.10.12 and all samba 4... | n/a | 0.0142 | | | [CVE-2023-4154](https://patchblox.com/security/data/cve/CVE-2023-4154.md) | Routine | samba: A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Dire... | 6.5 | 0.0140 | | | [CVE-2022-32746](https://patchblox.com/security/data/cve/CVE-2022-32746.md) | Routine | samba: A flaw was found in the Samba AD LDAP server | 5.4 | 0.0140 | | | [CVE-2022-32742](https://patchblox.com/security/data/cve/CVE-2022-32742.md) | Routine | ctdb: A flaw was found in Samba | 4.3 | 0.0138 | | | [CVE-2023-4091](https://patchblox.com/security/data/cve/CVE-2023-4091.md) | Routine | samba: A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only per... | 6.5 | 0.0133 | | | [CVE-2018-14628](https://patchblox.com/security/data/cve/CVE-2018-14628.md) | Routine | samba-ad-dc: An information leak vulnerability was discovered in Samba's LDAP server.Due to missing access control checks, an auth... | 4.3 | 0.0120 | | | [CVE-2023-0614](https://patchblox.com/security/data/cve/CVE-2023-0614.md) | Routine | python3-samba: The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidentialattribute disclosure vi LDAP filters was ins... | 6.5 | 0.0057 | | | [CVE-2023-0922](https://patchblox.com/security/data/cve/CVE-2023-0922.md) | Routine | ctdb: The Samba AD DC administration tool, when operating against a remote LDAPserver, will by default send new or reset pa... | 5.9 | 0.0048 | | | [CVE-2021-43566](https://patchblox.com/security/data/cve/CVE-2021-43566.md) | Routine | ctdb: All versions of Samba prior to 4.13.16 are vulnerable to a malicious clientusing an SMB1 or NFS race to allow a direc... | 2.6 | 0.0041 | | --- Data as of 2026-11-12T13:55:20Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.