winbind 2:4.20.4+dfsg-1ubuntu1: winbind 2:4.20.4+dfsg-1ubuntu1 for Ubuntu 25.04 (plucky)

winbind 2:4.20.4+dfsg-1ubuntu1, released October 10, 2023, fixes 25 CVEs in winbind. None of them is reported as exploited. Patch Radar priority: Urgent. The product is no longer supported.

UrgentUnsupported product

CVEs closed

2 rated Critical

Exploited

None reported

Highest CVSS

8.8

Base score, 0 to 10

Highest EPSS

0.6240

99th percentile

Priority of the 25 CVEs

Patch now 0
                                Urgent 3
                                High 9
                                Routine 13

Fixed package versions

Product	Release	Fixed in
winbind	Ubuntu 25.04 (plucky)	2:4.20.4+dfsg-1ubuntu1

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
Urgent	CVE-2022-37967	Windows Kerberos Elevation of Privilege Vulnerability	7.2	0.0482	More likely
Urgent	CVE-2022-37966	Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability	8.1	0.0294	More likely
Urgent	CVE-2022-38023	Netlogon RPC Elevation of Privilege Vulnerability	8.1	0.0275	More likely
High	CVE-2023-34966	ctdb: An infinite loop vulnerability was found in Samba's mdssvc RPC service forSpotlight	7.5	0.6240	None reported
High	CVE-2016-2124	ctdb: A flaw was found in the way samba implemented SMB1 authentication	8.1	0.0177	None reported
High	CVE-2022-2127	ldb-tools: An out-of-bounds read vulnerability was found in Samba due to insufficientlength checks in winbindd_pam_auth_crap.c	7.5	0.0172	None reported
High	CVE-2020-25717	libsmbclient0: A flaw was found in the way Samba maps domain users to local users	8.1	0.0167	None reported
High	CVE-2020-25722	ctdb: Multiple flaws were found in the way samba AD DC implemented access andconformance checking of stored data	8.8	0.0161	None reported
High	CVE-2022-2031	ctdb: A flaw was found in Samba	8.8	0.0135	None reported
High	CVE-2023-34968	libnss-winbind: A path disclosure vulnerability was found in Samba	7.5	0.0133	None reported
High	CVE-2022-32744	ctdb: A flaw was found in Samba	8.8	0.0126	None reported
High	CVE-2022-32745	ctdb: A flaw was found in Samba	8.1	0.0119	None reported
Routine	CVE-2022-3437	Heimdal: A user in a privileged network position may be able to leak sensitive user information	6.5	0.0400	None reported
Routine	CVE-2019-14907	ctdb: All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.xbefore 4.11.5 have an issue where if it is se...	6.5	0.0315	None reported
Routine	CVE-2021-3671	python3-samba: A null pointer de-reference was found in the way samba kerberos serverhandled missing sname in TGS-REQ (Ticket Granti...	n/a	0.0212	None reported
Routine	CVE-2023-42669	samba: A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/...	6.5	0.0194	None reported
Routine	CVE-2019-14902	ctdb: There is an issue in all samba 4.11.x versions before 4.11.5, all samba4.10.x versions before 4.10.12 and all samba 4...	n/a	0.0142	None reported
Routine	CVE-2023-4154	samba: A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active Dire...	6.5	0.0140	None reported
Routine	CVE-2022-32746	samba: A flaw was found in the Samba AD LDAP server	5.4	0.0140	None reported
Routine	CVE-2022-32742	ctdb: A flaw was found in Samba	4.3	0.0138	None reported
Routine	CVE-2023-4091	samba: A vulnerability was discovered in Samba, where the flaw allows SMB clients to truncate files, even with read-only per...	6.5	0.0133	None reported
Routine	CVE-2018-14628	samba-ad-dc: An information leak vulnerability was discovered in Samba's LDAP server.Due to missing access control checks, an auth...	4.3	0.0120	None reported
Routine	CVE-2023-0614	python3-samba: The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidentialattribute disclosure vi LDAP filters was ins...	6.5	0.0057	None reported
Routine	CVE-2023-0922	ctdb: The Samba AD DC administration tool, when operating against a remote LDAPserver, will by default send new or reset pa...	5.9	0.0048	None reported
Routine	CVE-2021-43566	ctdb: All versions of Samba prior to 4.13.16 are vulnerable to a malicious clientusing an SMB1 or NFS race to allow a direc...	2.6	0.0041	None reported

Also fixes CVE-2022-37967

KB5031364
Windows Server 2022, Windows Server 2022 (Server Core installation)
KB5031361
Windows 10 Version 1809 for 32-bit Systems, Windows 10 Version 1809 for ARM64-based Systems, Windows 10 Version 1809 for x64-based Systems and 2 more
KB5031362
Windows 10 Version 1607 for 32-bit Systems, Windows 10 Version 1607 for x64-based Systems, Windows Server 2016 and 1 more
KB5031407
Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
KB5031419
Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation)
KB5031427
Windows Server 2012, Windows Server 2012 (Server Core installation)
KB5031442
Windows Server 2012, Windows Server 2012 (Server Core installation)
KB5031408
Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/linux/ubuntu-plucky-winbind-2-4.20.4-dfsg-1ubuntu1">winbind 2:4.20.4+dfsg-1ubuntu1 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.