synced 12 MIN AGO
01 Record

CVE-2022-38023

Netlogon RPC Elevation of Privilege Vulnerability

HighPUBLISHEDCNA: microsoft
CNA base score8.1 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
View raw JSON

02 Description

Netlogon RPC Elevation of Privilege Vulnerability

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
2.36% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 83.5% of scored records. A rank, not a probability.
NVD base score
8.1 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD analysis status
Modified. NVD last modified this record on 2026-08-10.
Red Hat severity
Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2022-11-09 00:00Z3 YR AGO
Last updated
2026-08-10 15:11Z2 MO AGO
Reserved
2022-08-08
Assigning CNA
microsoft
Record state
PUBLISHED
Severity
High (CVSS 8.1)
CNA CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Weaknesses
Data version
5.2
Document digest
1c20f07d25b9a58bd4036243e9deab402f259d0af0568ab75a2d5d708158a698

05 Affected products

VendorProductVersionsPlatforms
MicrosoftWindows Server 2008 Service Pack 26.0.6003.0 to < 6.0.6003.22175x64-based Systems
MicrosoftWindows Server 2008 R2 Service Pack 16.1.7601.0 to < 6.1.7601.26623x64-based Systems
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)6.1.7601.0 to < 6.1.7601.26623x64-based Systems
MicrosoftWindows Server 2008 Service Pack 26.0.6003.0 to < 6.0.6003.2217532-bit Systems
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)6.0.6003.0 to < 6.0.6003.2217532-bit Systems, x64-based Systems
MicrosoftWindows Server 20126.2.9200.0 to < 6.2.9200.24374x64-based Systems
MicrosoftWindows Server 2012 (Server Core installation)6.2.9200.0 to < 6.2.9200.24374x64-based Systems
MicrosoftWindows Server 2012 R26.3.9600.0 to < 6.3.9600.21063x64-based Systems
MicrosoftWindows Server 2012 R2 (Server Core installation)6.3.9600.0 to < 6.3.9600.21063x64-based Systems
MicrosoftWindows Server 201610.0.14393.0 to < 10.0.14393.6085x64-based Systems
MicrosoftWindows Server 2016 (Server Core installation)10.0.14393.0 to < 10.0.14393.6085x64-based Systems
MicrosoftWindows Server 201910.0.17763.0 to < 10.0.17763.4645x64-based Systems
MicrosoftWindows Server 2019 (Server Core installation)10.0.17763.0 to < 10.0.17763.4645x64-based Systems
MicrosoftWindows Server 202210.0.20348.0 to < 10.0.20348.1850x64-based Systems

06 References

07 Fixed in

AlmaLinux 8

  • ctdb
    Fixed in 4.16.4-4.el8_7
  • libsmbclient
    Fixed in 4.16.4-4.el8_7
  • libsmbclient-devel
    Fixed in 4.16.4-4.el8_7
  • libwbclient
    Fixed in 4.16.4-4.el8_7
  • libwbclient-devel
    Fixed in 4.16.4-4.el8_7
  • python3-samba
    Fixed in 4.16.4-4.el8_7
  • python3-samba-test
    Fixed in 4.16.4-4.el8_7
  • samba
    Fixed in 4.16.4-4.el8_7
  • samba-client
    Fixed in 4.16.4-4.el8_7
  • samba-client-libs
    Fixed in 4.16.4-4.el8_7
  • samba-common
    Fixed in 4.16.4-4.el8_7
  • samba-common-libs
    Fixed in 4.16.4-4.el8_7
  • samba-common-tools
    Fixed in 4.16.4-4.el8_7
  • samba-devel
    Fixed in 4.16.4-4.el8_7
  • samba-krb5-printing
    Fixed in 4.16.4-4.el8_7
  • samba-libs
    Fixed in 4.16.4-4.el8_7
  • samba-pidl
    Fixed in 4.16.4-4.el8_7
  • samba-test
    Fixed in 4.16.4-4.el8_7
  • samba-test-libs
    Fixed in 4.16.4-4.el8_7
  • samba-vfs-iouring
    Fixed in 4.16.4-4.el8_7
  • samba-winbind
    Fixed in 4.16.4-4.el8_7
  • samba-winbind-clients
    Fixed in 4.16.4-4.el8_7
  • samba-winbind-krb5-locator
    Fixed in 4.16.4-4.el8_7
  • samba-winbind-modules
    Fixed in 4.16.4-4.el8_7
  • samba-winexe
    Fixed in 4.16.4-4.el8_7

Source: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

AlmaLinux 9

  • ctdb
    Fixed in 4.16.4-103.el9_1
  • libsmbclient
    Fixed in 4.16.4-103.el9_1
  • libsmbclient-devel
    Fixed in 4.16.4-103.el9_1
  • libwbclient
    Fixed in 4.16.4-103.el9_1
  • libwbclient-devel
    Fixed in 4.16.4-103.el9_1
  • python3-samba
    Fixed in 4.16.4-103.el9_1
  • samba
    Fixed in 4.16.4-103.el9_1
  • samba-client
    Fixed in 4.16.4-103.el9_1
  • samba-client-libs
    Fixed in 4.16.4-103.el9_1
  • samba-common
    Fixed in 4.16.4-103.el9_1
  • samba-common-libs
    Fixed in 4.16.4-103.el9_1
  • samba-common-tools
    Fixed in 4.16.4-103.el9_1
  • samba-devel
    Fixed in 4.16.4-103.el9_1
  • samba-krb5-printing
    Fixed in 4.16.4-103.el9_1
  • samba-libs
    Fixed in 4.16.4-103.el9_1
  • samba-pidl
    Fixed in 4.16.4-103.el9_1
  • samba-test
    Fixed in 4.16.4-103.el9_1
  • samba-test-libs
    Fixed in 4.16.4-103.el9_1
  • samba-vfs-iouring
    Fixed in 4.16.4-103.el9_1
  • samba-winbind
    Fixed in 4.16.4-103.el9_1
  • samba-winbind-clients
    Fixed in 4.16.4-103.el9_1
  • samba-winbind-krb5-locator
    Fixed in 4.16.4-103.el9_1
  • samba-winbind-modules
    Fixed in 4.16.4-103.el9_1
  • samba-winexe
    Fixed in 4.16.4-103.el9_1

Source: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

Arch Linux

  • samba
    Fixed in 4.17.5-1

Source: Arch Linux Security Tracker, the Arch Linux security team. Reformatted by exploit.cc.

CloudLinux 8

  • ctdb
    Fixed in 4.16.4-4.el8_7
  • libsmbclient
    Fixed in 4.16.4-4.el8_7
  • libsmbclient-devel
    Fixed in 4.16.4-4.el8_7
  • libwbclient
    Fixed in 4.16.4-4.el8_7
  • libwbclient-devel
    Fixed in 4.16.4-4.el8_7
  • python3-samba
    Fixed in 4.16.4-4.el8_7
  • python3-samba-test
    Fixed in 4.16.4-4.el8_7
  • samba
    Fixed in 4.16.4-4.el8_7
  • samba-client
    Fixed in 4.16.4-4.el8_7
  • samba-client-libs
    Fixed in 4.16.4-4.el8_7
  • samba-common
    Fixed in 4.16.4-4.el8_7
  • samba-common-libs
    Fixed in 4.16.4-4.el8_7
  • samba-common-tools
    Fixed in 4.16.4-4.el8_7
  • samba-devel
    Fixed in 4.16.4-4.el8_7
  • samba-krb5-printing
    Fixed in 4.16.4-4.el8_7
  • samba-libs
    Fixed in 4.16.4-4.el8_7
  • samba-pidl
    Fixed in 4.16.4-4.el8_7
  • samba-test
    Fixed in 4.16.4-4.el8_7
  • samba-test-libs
    Fixed in 4.16.4-4.el8_7
  • samba-vfs-iouring
    Fixed in 4.16.4-4.el8_7
  • samba-winbind
    Fixed in 4.16.4-4.el8_7
  • samba-winbind-clients
    Fixed in 4.16.4-4.el8_7
  • samba-winbind-krb5-locator
    Fixed in 4.16.4-4.el8_7
  • samba-winbind-modules
    Fixed in 4.16.4-4.el8_7
  • samba-winexe
    Fixed in 4.16.4-4.el8_7

Derived from AlmaLinux 8. Partial coverage: only packages taken from AlmaLinux 8 are listed.

Source: CloudLinux errata, CloudLinux Inc. Derived from: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

CloudLinux 9

  • ctdb
    Fixed in 4.16.4-103.el9_1
  • libsmbclient
    Fixed in 4.16.4-103.el9_1
  • libsmbclient-devel
    Fixed in 4.16.4-103.el9_1
  • libwbclient
    Fixed in 4.16.4-103.el9_1
  • libwbclient-devel
    Fixed in 4.16.4-103.el9_1
  • python3-samba
    Fixed in 4.16.4-103.el9_1
  • samba
    Fixed in 4.16.4-103.el9_1
  • samba-client
    Fixed in 4.16.4-103.el9_1
  • samba-client-libs
    Fixed in 4.16.4-103.el9_1
  • samba-common
    Fixed in 4.16.4-103.el9_1
  • samba-common-libs
    Fixed in 4.16.4-103.el9_1
  • samba-common-tools
    Fixed in 4.16.4-103.el9_1
  • samba-devel
    Fixed in 4.16.4-103.el9_1
  • samba-krb5-printing
    Fixed in 4.16.4-103.el9_1
  • samba-libs
    Fixed in 4.16.4-103.el9_1
  • samba-pidl
    Fixed in 4.16.4-103.el9_1
  • samba-test
    Fixed in 4.16.4-103.el9_1
  • samba-test-libs
    Fixed in 4.16.4-103.el9_1
  • samba-vfs-iouring
    Fixed in 4.16.4-103.el9_1
  • samba-winbind
    Fixed in 4.16.4-103.el9_1
  • samba-winbind-clients
    Fixed in 4.16.4-103.el9_1
  • samba-winbind-krb5-locator
    Fixed in 4.16.4-103.el9_1
  • samba-winbind-modules
    Fixed in 4.16.4-103.el9_1
  • samba-winexe
    Fixed in 4.16.4-103.el9_1

Derived from AlmaLinux 9. Partial coverage: only packages taken from AlmaLinux 9 are listed.

Source: CloudLinux errata, CloudLinux Inc. Derived from: AlmaLinux, AlmaLinux OS. Copyright (c) 2023 AlmaLinux OS. Licensed under MIT License. Received through OSV.dev. Reformatted by exploit.cc.

Debian 12

  • samba
    Fixed in 2:4.17.4+dfsg-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

  • samba
    Fixed in 2:4.17.4+dfsg-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

  • samba
    Fixed in 2:4.17.4+dfsg-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 20.04 LTS

  • samba
    Fixed in 2:4.15.13+dfsg-0ubuntu0.20.04.1

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu 22.04 LTS

  • samba
    Fixed in 2:4.15.13+dfsg-0ubuntu1

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu Pro 14.04 LTS

  • samba
    No fix yet

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu Pro 16.04 LTS

  • samba
    No fix yet

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

Ubuntu Pro 18.04 LTS

  • samba
    No fix yet

Source: Ubuntu, Canonical Ltd. Licensed under CC BY-SA 4.0. Received through OSV.dev. Reformatted by exploit.cc.

A release or ecosystem missing from this list has no record here. It may be unaffected or not covered by the source. Source notices and licences.