Vulnerability · Published Sep 1, 2022 · Assigned by redhat
CVE-2022-1615
Medium 5.5
In plain English
A medium-severity weak randomness in Samba. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.5%top 55.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In Samba, GnuTLS gnutls_rnd() can fail and give predictable random values.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | ctdb | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | ctdb | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | libnetapi | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | libnetapi | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | libnetapi-devel | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | libnetapi-devel | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | libsmbclient | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | libsmbclient | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | libsmbclient-devel | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | libsmbclient-devel | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | libwbclient | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | libwbclient | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | libwbclient-devel | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | libwbclient-devel | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | python3-samba | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | python3-samba | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | python3-samba-dc | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | python3-samba-dc | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | python3-samba-devel | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | python3-samba-devel | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | python3-samba-test | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | python3-samba-test | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-client | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-client | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-client-libs | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-client-libs | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-common | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-common | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-common-libs | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-common-libs | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-common-tools | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-common-tools | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-dc-libs | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-dc-libs | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-dcerpc | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-dcerpc | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-devel | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-devel | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-krb5-printing | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-krb5-printing | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-ldb-ldap-modules | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-ldb-ldap-modules | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-libs | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-libs | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-pidl | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-pidl | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-test | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-test | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-test-libs | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-test-libs | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-tools | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-tools | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-usershares | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-usershares | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-vfs-iouring | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-vfs-iouring | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-winbind | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-winbind | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-winbind-clients | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-winbind-clients | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-winbind-krb5-locator | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-winbind-krb5-locator | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-winbind-modules | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-winbind-modules | 4.17.5-102.el9 | ALSA-2023:2519 |
| AlmaLinux:8 | samba-winexe | 4.17.5-2.el8 | ALSA-2023:2987 |
| AlmaLinux:9 | samba-winexe | 4.17.5-102.el9 | ALSA-2023:2519 |
| Alpine:v3.20 | samba | 4.17.0-r0 | ALPINE-CVE-2022-1615 |
| Alpine:v3.21 | samba | 4.17.0-r0 | ALPINE-CVE-2022-1615 |
| Alpine:v3.22 | samba | 4.17.0-r0 | ALPINE-CVE-2022-1615 |
| Alpine:v3.23 | samba | 4.17.0-r0 | ALPINE-CVE-2022-1615 |
| Alpine:v3.24 | samba | 4.17.0-r0 | ALPINE-CVE-2022-1615 |
| Debian:12 | samba | 2:4.16.5+dfsg-2 | DEBIAN-CVE-2022-1615 |
| Debian:13 | samba | 2:4.16.5+dfsg-2 | DEBIAN-CVE-2022-1615 |
| Debian:14 | samba | 2:4.16.5+dfsg-2 | DEBIAN-CVE-2022-1615 |
| Ubuntu:22.04:LTS | samba | no fix listed | UBUNTU-CVE-2022-1615 |
Affected products (as reported)
Weakness: CWE-330