Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-5cd3-497h-qkhw
SummaryMultiple vulnerabilities have been discovered in Samba, the worst of which could result in root remote code execution.
Aliases
0
alias CVE-2022-38023
Fixed_packages
0
url pkg:alpm/archlinux/samba@4.17.5-1
purl pkg:alpm/archlinux/samba@4.17.5-1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/samba@4.17.5-1
1
url pkg:apk/alpine/samba@4.15.13-r0?arch=x86_64&distroversion=v3.16&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=x86_64&distroversion=v3.16&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=x86_64&distroversion=v3.16&reponame=main
2
url pkg:apk/alpine/samba@4.15.13-r0?arch=aarch64&distroversion=v3.16&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=aarch64&distroversion=v3.16&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=aarch64&distroversion=v3.16&reponame=main
3
url pkg:apk/alpine/samba@4.15.13-r0?arch=armhf&distroversion=v3.16&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=armhf&distroversion=v3.16&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=armhf&distroversion=v3.16&reponame=main
4
url pkg:apk/alpine/samba@4.15.13-r0?arch=armv7&distroversion=v3.16&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=armv7&distroversion=v3.16&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=armv7&distroversion=v3.16&reponame=main
5
url pkg:apk/alpine/samba@4.15.13-r0?arch=ppc64le&distroversion=v3.16&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=ppc64le&distroversion=v3.16&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=ppc64le&distroversion=v3.16&reponame=main
6
url pkg:apk/alpine/samba@4.15.13-r0?arch=s390x&distroversion=v3.16&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=s390x&distroversion=v3.16&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=s390x&distroversion=v3.16&reponame=main
7
url pkg:apk/alpine/samba@4.15.13-r0?arch=x86&distroversion=v3.16&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=x86&distroversion=v3.16&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=x86&distroversion=v3.16&reponame=main
8
url pkg:apk/alpine/samba@4.15.13-r0?arch=aarch64&distroversion=v3.15&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=aarch64&distroversion=v3.15&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=aarch64&distroversion=v3.15&reponame=main
9
url pkg:apk/alpine/samba@4.15.13-r0?arch=armhf&distroversion=v3.15&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=armhf&distroversion=v3.15&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=armhf&distroversion=v3.15&reponame=main
10
url pkg:apk/alpine/samba@4.15.13-r0?arch=armv7&distroversion=v3.15&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=armv7&distroversion=v3.15&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=armv7&distroversion=v3.15&reponame=main
11
url pkg:apk/alpine/samba@4.15.13-r0?arch=ppc64le&distroversion=v3.15&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=ppc64le&distroversion=v3.15&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=ppc64le&distroversion=v3.15&reponame=main
12
url pkg:apk/alpine/samba@4.15.13-r0?arch=s390x&distroversion=v3.15&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=s390x&distroversion=v3.15&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=s390x&distroversion=v3.15&reponame=main
13
url pkg:apk/alpine/samba@4.15.13-r0?arch=x86&distroversion=v3.15&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=x86&distroversion=v3.15&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=x86&distroversion=v3.15&reponame=main
14
url pkg:apk/alpine/samba@4.15.13-r0?arch=x86_64&distroversion=v3.15&reponame=main
purl pkg:apk/alpine/samba@4.15.13-r0?arch=x86_64&distroversion=v3.15&reponame=main
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/samba@4.15.13-r0%3Farch=x86_64&distroversion=v3.15&reponame=main
15
url pkg:deb/debian/samba@2:4.17.4%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/samba@2:4.17.4%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.17.4%252Bdfsg-1%3Fdistro=trixie
16
url pkg:deb/debian/samba@2:4.17.12%2Bdfsg-0%2Bdeb12u2
purl pkg:deb/debian/samba@2:4.17.12%2Bdfsg-0%2Bdeb12u2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.17.12%252Bdfsg-0%252Bdeb12u2
17
url pkg:deb/debian/samba@2:4.17.12%2Bdfsg-0%2Bdeb12u3?distro=trixie
purl pkg:deb/debian/samba@2:4.17.12%2Bdfsg-0%2Bdeb12u3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.17.12%252Bdfsg-0%252Bdeb12u3%3Fdistro=trixie
18
url pkg:deb/debian/samba@2:4.22.8%2Bdfsg-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/samba@2:4.22.8%2Bdfsg-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.22.8%252Bdfsg-0%252Bdeb13u1%3Fdistro=trixie
19
url pkg:deb/debian/samba@2:4.23.6%2Bdfsg-2?distro=trixie
purl pkg:deb/debian/samba@2:4.23.6%2Bdfsg-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.23.6%252Bdfsg-2%3Fdistro=trixie
20
url pkg:deb/debian/samba@2:4.24.1%2Bdfsg-1?distro=trixie
purl pkg:deb/debian/samba@2:4.24.1%2Bdfsg-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.24.1%252Bdfsg-1%3Fdistro=trixie
21
url pkg:ebuild/net-fs/samba@4.18.4
purl pkg:ebuild/net-fs/samba@4.18.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/net-fs/samba@4.18.4
Affected_packages
0
url pkg:alpm/archlinux/samba@4.17.4-4
purl pkg:alpm/archlinux/samba@4.17.4-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3du2-evy8-jfa1
1
vulnerability VCID-5cd3-497h-qkhw
2
vulnerability VCID-7xdg-sn88-bkbs
3
vulnerability VCID-84q8-2457-qkc5
4
vulnerability VCID-g5j1-tqrd-nkan
5
vulnerability VCID-s2ne-rcp3-nbgz
6
vulnerability VCID-xmn1-g72k-8qcq
resource_url http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/samba@4.17.4-4
1
url pkg:deb/debian/samba@2:4.13.13%2Bdfsg-1~deb11u6?distro=trixie
purl pkg:deb/debian/samba@2:4.13.13%2Bdfsg-1~deb11u6?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18xs-py1v-xfey
1
vulnerability VCID-28rq-1d68-4bfz
2
vulnerability VCID-2w26-yjmn-k7an
3
vulnerability VCID-3du2-evy8-jfa1
4
vulnerability VCID-5cd3-497h-qkhw
5
vulnerability VCID-68zz-z589-87f6
6
vulnerability VCID-6mju-nwzy-pqeq
7
vulnerability VCID-7xdg-sn88-bkbs
8
vulnerability VCID-84q8-2457-qkc5
9
vulnerability VCID-94k8-98me-x3dw
10
vulnerability VCID-apqw-e2px-yka5
11
vulnerability VCID-b4ty-d775-5fed
12
vulnerability VCID-bc1t-hzu5-bffd
13
vulnerability VCID-bpht-9daq-rfgd
14
vulnerability VCID-fskg-j9fe-6yeg
15
vulnerability VCID-hfsk-4cbd-m3b1
16
vulnerability VCID-kkwp-2x9m-9bgd
17
vulnerability VCID-q2d9-vahb-6qce
18
vulnerability VCID-r7va-6j6s-rba5
19
vulnerability VCID-w4c6-p858-rkaw
20
vulnerability VCID-wxva-f9ay-c3a2
21
vulnerability VCID-xmn1-g72k-8qcq
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.13.13%252Bdfsg-1~deb11u6%3Fdistro=trixie
2
url pkg:deb/debian/samba@2:4.13.13%2Bdfsg-1~deb11u6
purl pkg:deb/debian/samba@2:4.13.13%2Bdfsg-1~deb11u6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18xs-py1v-xfey
1
vulnerability VCID-28rq-1d68-4bfz
2
vulnerability VCID-2w26-yjmn-k7an
3
vulnerability VCID-3du2-evy8-jfa1
4
vulnerability VCID-5cd3-497h-qkhw
5
vulnerability VCID-68zz-z589-87f6
6
vulnerability VCID-6mju-nwzy-pqeq
7
vulnerability VCID-745n-wca7-d7fh
8
vulnerability VCID-7xdg-sn88-bkbs
9
vulnerability VCID-84q8-2457-qkc5
10
vulnerability VCID-94k8-98me-x3dw
11
vulnerability VCID-apqw-e2px-yka5
12
vulnerability VCID-b4ty-d775-5fed
13
vulnerability VCID-bc1t-hzu5-bffd
14
vulnerability VCID-bpht-9daq-rfgd
15
vulnerability VCID-fskg-j9fe-6yeg
16
vulnerability VCID-hfsk-4cbd-m3b1
17
vulnerability VCID-kkwp-2x9m-9bgd
18
vulnerability VCID-q2d9-vahb-6qce
19
vulnerability VCID-r7va-6j6s-rba5
20
vulnerability VCID-w4c6-p858-rkaw
21
vulnerability VCID-wxva-f9ay-c3a2
22
vulnerability VCID-xmn1-g72k-8qcq
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/samba@2:4.13.13%252Bdfsg-1~deb11u6
3
url pkg:rpm/redhat/redhat-virtualization-host@4.5.3-202306050942_8?arch=6
purl pkg:rpm/redhat/redhat-virtualization-host@4.5.3-202306050942_8?arch=6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cd3-497h-qkhw
1
vulnerability VCID-8834-7b7n-a7f1
2
vulnerability VCID-hqgh-ak7y-v7dx
3
vulnerability VCID-m4wy-164p-qyh7
4
vulnerability VCID-pphs-rtxe-wfca
5
vulnerability VCID-sq5h-zx4v-67hm
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/redhat-virtualization-host@4.5.3-202306050942_8%3Farch=6
4
url pkg:rpm/redhat/samba@4.10.4-107?arch=el8_1
purl pkg:rpm/redhat/samba@4.10.4-107?arch=el8_1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cd3-497h-qkhw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/samba@4.10.4-107%3Farch=el8_1
5
url pkg:rpm/redhat/samba@4.10.16-24?arch=el7_9
purl pkg:rpm/redhat/samba@4.10.16-24?arch=el7_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cd3-497h-qkhw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/samba@4.10.16-24%3Farch=el7_9
6
url pkg:rpm/redhat/samba@4.11.2-22?arch=el8_2
purl pkg:rpm/redhat/samba@4.11.2-22?arch=el8_2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cd3-497h-qkhw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/samba@4.11.2-22%3Farch=el8_2
7
url pkg:rpm/redhat/samba@4.13.3-11?arch=el8_4
purl pkg:rpm/redhat/samba@4.13.3-11?arch=el8_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cd3-497h-qkhw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/samba@4.13.3-11%3Farch=el8_4
8
url pkg:rpm/redhat/samba@4.15.5-12?arch=el8_6
purl pkg:rpm/redhat/samba@4.15.5-12?arch=el8_6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cd3-497h-qkhw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/samba@4.15.5-12%3Farch=el8_6
9
url pkg:rpm/redhat/samba@4.15.5-110?arch=el9_0
purl pkg:rpm/redhat/samba@4.15.5-110?arch=el9_0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cd3-497h-qkhw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/samba@4.15.5-110%3Farch=el9_0
10
url pkg:rpm/redhat/samba@4.16.4-4?arch=el8_7
purl pkg:rpm/redhat/samba@4.16.4-4?arch=el8_7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cd3-497h-qkhw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/samba@4.16.4-4%3Farch=el8_7
11
url pkg:rpm/redhat/samba@4.16.4-103?arch=el9_1
purl pkg:rpm/redhat/samba@4.16.4-103?arch=el9_1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5cd3-497h-qkhw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/samba@4.16.4-103%3Farch=el9_1
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38023.json
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38023.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-38023
reference_id
reference_type
scores
0
value 0.00354
scoring_system epss
scoring_elements 0.57787
published_at 2026-04-09T12:55:00Z
1
value 0.00354
scoring_system epss
scoring_elements 0.57804
published_at 2026-04-11T12:55:00Z
2
value 0.00354
scoring_system epss
scoring_elements 0.57782
published_at 2026-04-12T12:55:00Z
3
value 0.00354
scoring_system epss
scoring_elements 0.57761
published_at 2026-04-13T12:55:00Z
4
value 0.00354
scoring_system epss
scoring_elements 0.57789
published_at 2026-04-16T12:55:00Z
5
value 0.00354
scoring_system epss
scoring_elements 0.57735
published_at 2026-04-02T12:55:00Z
6
value 0.00354
scoring_system epss
scoring_elements 0.57757
published_at 2026-04-04T12:55:00Z
7
value 0.00354
scoring_system epss
scoring_elements 0.5773
published_at 2026-04-07T12:55:00Z
8
value 0.00354
scoring_system epss
scoring_elements 0.57785
published_at 2026-04-08T12:55:00Z
9
value 0.00481
scoring_system epss
scoring_elements 0.65134
published_at 2026-04-21T12:55:00Z
10
value 0.00481
scoring_system epss
scoring_elements 0.6515
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-38023
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38023
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38023
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2154362
reference_id 2154362
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2154362
5
reference_url https://security.archlinux.org/AVG-2828
reference_id AVG-2828
reference_type
scores
0
value Unknown
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-2828
6
reference_url https://security.gentoo.org/glsa/202309-06
reference_id GLSA-202309-06
reference_type
scores
url https://security.gentoo.org/glsa/202309-06
7
reference_url https://access.redhat.com/errata/RHSA-2023:0637
reference_id RHSA-2023:0637
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0637
8
reference_url https://access.redhat.com/errata/RHSA-2023:0638
reference_id RHSA-2023:0638
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0638
9
reference_url https://access.redhat.com/errata/RHSA-2023:0639
reference_id RHSA-2023:0639
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0639
10
reference_url https://access.redhat.com/errata/RHSA-2023:0838
reference_id RHSA-2023:0838
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:0838
11
reference_url https://access.redhat.com/errata/RHSA-2023:1090
reference_id RHSA-2023:1090
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:1090
12
reference_url https://access.redhat.com/errata/RHSA-2023:2127
reference_id RHSA-2023:2127
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2127
13
reference_url https://access.redhat.com/errata/RHSA-2023:2136
reference_id RHSA-2023:2136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2136
14
reference_url https://access.redhat.com/errata/RHSA-2023:2137
reference_id RHSA-2023:2137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:2137
15
reference_url https://access.redhat.com/errata/RHSA-2023:3491
reference_id RHSA-2023:3491
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:3491
16
reference_url https://usn.ubuntu.com/5822-1/
reference_id USN-5822-1
reference_type
scores
url https://usn.ubuntu.com/5822-1/
17
reference_url https://usn.ubuntu.com/5936-1/
reference_id USN-5936-1
reference_type
scores
url https://usn.ubuntu.com/5936-1/
Weaknesses
0
cwe_id 328
name Use of Weak Hash
description The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack).
Exploits
Severity_range_score8.1 - 8.1
Exploitability0.5
Weighted_severity7.3
Risk_score3.6
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-5cd3-497h-qkhw