Upgrade Amazon-Linux:2023 xorg-x11-server-Xnest to version 0:21.1.13-5.amzn2023.0.3 or higher. This issue was patched in ALAS2023-2025-892 .

samba vulnerabilities

Known vulnerabilities in the samba package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H Incorrect Default Permissions	<4.15.12-r0
H CVE-2022-38023	<4.15.13-r0
C Reversible One-Way Hash	<4.15.13-r0
H CVE-2022-37966	<4.15.13-r0
H CVE-2022-37967	<4.15.13-r0
H Authentication Bypass	<4.15.12-r0
M Link Following	<4.15.12-r0
M Heap-based Buffer Overflow	<4.15.12-r0
H Integer Overflow or Wraparound	<4.15.12-r0
H Out-of-bounds Read	<4.15.12-r0
M Use After Free	<4.15.12-r0
M CVE-2022-32742	<4.15.12-r0
H Improper Authentication	<4.15.12-r0
H Out-of-bounds Read	<4.15.12-r0
M Link Following	<4.15.5-r0
H Incorrect Authorization	<4.15.2-r0
H Race Condition	<4.15.2-r0
M Improper Authentication	<4.15.2-r0
H Improper Input Validation	<4.15.2-r0
H Use After Free	<4.15.2-r0
H Missing Authorization	<4.15.2-r0
H Improper Input Validation	<4.15.2-r0
H CVE-2021-23192	<4.15.2-r0
M NULL Pointer Dereference	<4.15.0-r0
M Out-of-bounds Read	<4.14.4-r0
H Out-of-bounds Read	<4.14.2-r0
H Out-of-bounds Read	<4.14.2-r0
M CVE-2020-14383	<4.12.9-r0
M NULL Pointer Dereference	<4.12.9-r0
M Improper Privilege Management	<4.12.9-r0
M Improper Privilege Management	<4.12.7-r0
H Improper Input Validation	<4.12.5-r0
M Use After Free	<4.12.5-r0
H Resource Exhaustion	<4.12.5-r0
M NULL Pointer Dereference	<4.12.5-r0
M Use After Free	<4.12.2-r0
H Buffer Overflow	<4.12.2-r0
M Use After Free	<4.11.5-r0
M CVE-2019-14902	<4.11.5-r0
M Out-of-bounds Read	<4.11.5-r0
M Improper Authentication	<4.11.3-r0
M Incorrect Default Permissions	<4.11.3-r0
M Directory Traversal	<4.11.2-r0
M Weak Password Requirements	<4.11.2-r0
C Directory Traversal	<4.10.8-r0
M NULL Pointer Dereference	<4.10.5-r0
M NULL Pointer Dereference	<4.10.5-r0
H Improperly Implemented Security Check for Standard	<4.10.3-r0
M Directory Traversal	<4.8.11-r0
M Resource Exhaustion	<4.8.7-r0
M Double Free	<4.8.7-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<4.8.11-r0
M NULL Pointer Dereference	<4.8.7-r0
M Improper Input Validation	<4.8.4-r0
M Information Exposure	<4.8.4-r0
H Insufficiently Protected Credentials	<4.8.4-r0
H Out-of-Bounds	<4.8.4-r0
M NULL Pointer Dereference	<4.8.4-r0
H Cryptographic Issues	<4.7.0-r0
H Man-in-the-Middle (MitM)	<4.7.0-r0
H Information Exposure	<4.7.0-r0
M NULL Pointer Dereference	<4.7.6-r0
H Incorrect Authorization	<4.7.6-r0
H Race Condition	<4.6.1-r0
H Out-of-Bounds	<4.7.3-r0
C Use After Free	<4.7.3-r0

Vulnerability

Vulnerable Version

Incorrect Default Permissions

<4.15.12-r0

CVE-2022-38023

<4.15.13-r0

Reversible One-Way Hash

<4.15.13-r0

CVE-2022-37966

<4.15.13-r0

CVE-2022-37967

<4.15.13-r0