{
  "fix": "python3-samba 2:4.20.4\u002Bdfsg-1ubuntu1",
  "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-python3-samba-2-4.20.4-dfsg-1ubuntu1",
  "summary": "python3-samba 2:4.20.4\u002Bdfsg-1ubuntu1, released October 10, 2023, fixes 25 CVEs in python3-samba. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.",
  "platform": "linux",
  "type": "package",
  "title": "python3-samba 2:4.20.4\u002Bdfsg-1ubuntu1 for Ubuntu 25.04 (plucky)",
  "released": "2023-10-10T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2022-37967, exploitation more likely",
  "supported": false,
  "cveCount": 25,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.62402,
  "maxCvss": 8.8,
  "appliesTo": [
    {
      "product": "python3-samba",
      "productUrl": "https://patchblox.com/security/product/linux/python3-samba",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "2:4.20.4\u002Bdfsg-1ubuntu1",
      "supported": true
    }
  ],
  "cves": [
    {
      "cveId": "CVE-2022-37967",
      "url": "https://patchblox.com/security/cve/CVE-2022-37967",
      "title": "Windows Kerberos Elevation of Privilege Vulnerability",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 7.2,
      "epss": 0.04818,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-37966",
      "url": "https://patchblox.com/security/cve/CVE-2022-37966",
      "title": "Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.1,
      "epss": 0.02936,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-38023",
      "url": "https://patchblox.com/security/cve/CVE-2022-38023",
      "title": "Netlogon RPC Elevation of Privilege Vulnerability",
      "priority": "Urgent",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.02749,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-34966",
      "url": "https://patchblox.com/security/cve/CVE-2023-34966",
      "title": "ctdb: An infinite loop vulnerability was found in Samba\u0027s mdssvc RPC service forSpotlight",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.62402,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2016-2124",
      "url": "https://patchblox.com/security/cve/CVE-2016-2124",
      "title": "ctdb: A flaw was found in the way samba implemented SMB1 authentication",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.01766,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-2127",
      "url": "https://patchblox.com/security/cve/CVE-2022-2127",
      "title": "ldb-tools: An out-of-bounds read vulnerability was found in Samba due to insufficientlength checks in winbindd_pam_auth_crap.c",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.01722,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-25717",
      "url": "https://patchblox.com/security/cve/CVE-2020-25717",
      "title": "libsmbclient0: A flaw was found in the way Samba maps domain users to local users",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.01625,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2020-25722",
      "url": "https://patchblox.com/security/cve/CVE-2020-25722",
      "title": "ctdb: Multiple flaws were found in the way samba AD DC implemented access andconformance checking of stored data",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01606,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-2031",
      "url": "https://patchblox.com/security/cve/CVE-2022-2031",
      "title": "ctdb: A flaw was found in Samba",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-34968",
      "url": "https://patchblox.com/security/cve/CVE-2023-34968",
      "title": "libnss-winbind: A path disclosure vulnerability was found in Samba",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.01333,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32744",
      "url": "https://patchblox.com/security/cve/CVE-2022-32744",
      "title": "ctdb: A flaw was found in Samba",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.01262,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32745",
      "url": "https://patchblox.com/security/cve/CVE-2022-32745",
      "title": "ctdb: A flaw was found in Samba",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.1,
      "epss": 0.01193,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-3437",
      "url": "https://patchblox.com/security/cve/CVE-2022-3437",
      "title": "Heimdal: A user in a privileged network position may be able to leak sensitive user information",
      "priority": "Routine",
      "severity": "MEDIUM",
      "cvss": 6.5,
      "epss": 0.03858,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-14907",
      "url": "https://patchblox.com/security/cve/CVE-2019-14907",
      "title": "ctdb: All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.xbefore 4.11.5 have an issue where if it is se...",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 6.5,
      "epss": 0.03151,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-3671",
      "url": "https://patchblox.com/security/cve/CVE-2021-3671",
      "title": "python3-samba: A null pointer de-reference was found in the way samba kerberos serverhandled missing sname in TGS-REQ (Ticket Granti...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.02118,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-42669",
      "url": "https://patchblox.com/security/cve/CVE-2023-42669",
      "title": "samba: A vulnerability was found in Samba\u0027s \u0022rpcecho\u0022 development server, a non-Windows RPC server used to test Samba\u0027s DCE/...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01941,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2019-14902",
      "url": "https://patchblox.com/security/cve/CVE-2019-14902",
      "title": "ctdb: There is an issue in all samba 4.11.x versions before 4.11.5, all samba4.10.x versions before 4.10.12 and all samba 4...",
      "priority": "Routine",
      "severity": "Low",
      "epss": 0.01421,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4154",
      "url": "https://patchblox.com/security/cve/CVE-2023-4154",
      "title": "samba: A design flaw was found in Samba\u0027s DirSync control implementation, which exposes passwords and secrets in Active Dire...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01397,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32746",
      "url": "https://patchblox.com/security/cve/CVE-2022-32746",
      "title": "samba: A flaw was found in the Samba AD LDAP server",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.4,
      "epss": 0.01395,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-32742",
      "url": "https://patchblox.com/security/cve/CVE-2022-32742",
      "title": "ctdb: A flaw was found in Samba",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.3,
      "epss": 0.01383,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4091",
      "url": "https://patchblox.com/security/cve/CVE-2023-4091",
      "title": "samba: A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only per...",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01334,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2018-14628",
      "url": "https://patchblox.com/security/cve/CVE-2018-14628",
      "title": "samba-ad-dc: An information leak vulnerability was discovered in Samba\u0027s LDAP server.Due to missing access control checks, an auth...",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.3,
      "epss": 0.01202,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0614",
      "url": "https://patchblox.com/security/cve/CVE-2023-0614",
      "title": "python3-samba: The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidentialattribute disclosure vi LDAP filters was ins...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00571,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0922",
      "url": "https://patchblox.com/security/cve/CVE-2023-0922",
      "title": "ctdb: The Samba AD DC administration tool, when operating against a remote LDAPserver, will by default send new or reset pa...",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.9,
      "epss": 0.00484,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2021-43566",
      "url": "https://patchblox.com/security/cve/CVE-2021-43566",
      "title": "ctdb: All versions of Samba prior to 4.13.16 are vulnerable to a malicious clientusing an SMB1 or NFS race to allow a direc...",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 2.6,
      "epss": 0.00405,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-12T01:51:14Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}