CVE:CVE-2022-37967
CNNVD:CNNVD-202211-2288
Microsoft Windows Kerberos是美国微软（Microsoft）公司的一个用于在网络集群中进行身份验证的软件。Kerberos 同时作为一种网络认证协议，其设计目标是通过密钥系统为客户机/服务器应用程序提供强大的认证服务。
Microsoft Windows Kerberos存在安全漏洞。以下产品和版本受到影响：Windows Server 2016,Windows Server 2016 (Server Core installation),Windows Server 2008 for 32-bit Systems Service Pack 2,Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server 2022,Windows Server 2022 (Server Core installation),Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1,Windows Server 2012 R2 (Server Core installation),Windows Server 2019,Windows Server 2019 (Server Core installation),Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation),Windows Server 2012,Windows Server 2012 (Server Core installation),Windows Server 2012 R2。
solution:Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2:sp1,and avoid the version -:sp2,r2:sp1; Upgrade microsoft windows_server_2012 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_server_2016 to a higher version than -; Upgrade microsoft windows_server_2019 to a higher version than -; Upgrade microsoft windows_server_2022 to a higher version than -; Upgrade fedoraproject fedora to a higher version than 36,37,and avoid the version 36,37; Upgrade netapp management_services_for_element_software to a higher version than -; Upgrade netapp management_services_for_netapp_hci to a higher version than -; Upgrade samba samba to a higher version than 4.16.8,4.17.4,and avoid the version (4.15.13,),[4.16.0,4.16.8),[4.17.0,4.17.4),no fixed version after 4.15.13