CVE-2016-2124 A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
MediumCVSS 5.9
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/samba(Ubuntu:22.04) | < 2:4.13.14+dfsg-0ubuntu1 | 2:4.13.14+dfsg-0ubuntu1 |
| debian/samba(Debian:12) | < 2:4.13.14+dfsg-1 | 2:4.13.14+dfsg-1 |
| debian/samba(Debian:13) | < 2:4.13.14+dfsg-1 | 2:4.13.14+dfsg-1 |
| debian/samba(Debian:14) | < 2:4.13.14+dfsg-1 | 2:4.13.14+dfsg-1 |
| samba | >= 3.0.0, < 4.13.14 | 4.13.14 |
| samba | >= 4.14.0, < 4.14.10 | 4.14.10 |
| samba | >= 4.15.0, < 4.15.2 | 4.15.2 |
| debian linux | = 9.0 | No fix listed |
| debian linux | = 10.0 | No fix listed |
| fedoraproject fedora | = 33 | No fix listed |
| fedoraproject fedora | = 34 | No fix listed |
| fedoraproject fedora | = 35 | No fix listed |
| redhat codeready linux builder | All versions | No fix listed |
| redhat gluster storage | = 3.0 | No fix listed |
| redhat gluster storage | = 3.5 | No fix listed |
| redhat openstack | = 13 | No fix listed |
| redhat openstack | = 16.1 | No fix listed |
| redhat openstack | = 16.2 | No fix listed |
| redhat virtualization host | = 4.0 | No fix listed |
| redhat enterprise linux | = 7.0 | No fix listed |
| redhat enterprise linux | = 8.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux eus | = 8.2 | No fix listed |
| redhat enterprise linux eus | = 8.4 | No fix listed |
| redhat enterprise linux for ibm z systems | = 7.0 | No fix listed |
Show 34 more
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux for ibm z systems | = 8.0 | No fix listed |
| redhat enterprise linux for ibm z systems eus | = 8.2 | No fix listed |
| redhat enterprise linux for ibm z systems eus | = 8.4 | No fix listed |
| redhat enterprise linux for power big endian | = 7.0 | No fix listed |
| redhat enterprise linux for power little endian | = 7.0 | No fix listed |
| redhat enterprise linux for power little endian | = 8.0 | No fix listed |
| redhat enterprise linux for power little endian eus | = 8.2 | No fix listed |
| redhat enterprise linux for power little endian eus | = 8.4 | No fix listed |
| redhat enterprise linux for scientific computing | = 7.0 | No fix listed |
| redhat enterprise linux resilient storage | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux server aus | = 8.2 | No fix listed |
| redhat enterprise linux server aus | = 8.4 | No fix listed |
| redhat enterprise linux server tus | = 8.4 | No fix listed |
| redhat enterprise linux server update services for sap solutions | = 8.2 | No fix listed |
| redhat enterprise linux server update services for sap solutions | = 8.4 | No fix listed |
| redhat enterprise linux tus | = 8.2 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| Canonical Ubuntu Linux | = 18.04 | No fix listed |
| Canonical Ubuntu Linux | = 20.04 | No fix listed |
| Canonical Ubuntu Linux | = 21.04 | No fix listed |
| Canonical Ubuntu Linux | = 21.10 | No fix listed |
| alpine/samba(Alpine:v3.13) | >= 3.0.0, < 4.13.17-r0 | 4.13.17-r0 |
| alpine/samba(Alpine:v3.14) | >= 3.0.0, < 4.14.12-r0 | 4.14.12-r0 |
| alpine/samba(Alpine:v3.15) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
| alpine/samba(Alpine:v3.16) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
| alpine/samba(Alpine:v3.17) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
| alpine/samba(Alpine:v3.18) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
| alpine/samba(Alpine:v3.19) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
| alpine/samba(Alpine:v3.20) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
| alpine/samba(Alpine:v3.21) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
| alpine/samba(Alpine:v3.22) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
| alpine/samba(Alpine:v3.23) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
| alpine/samba(Alpine:v3.24) | >= 3.0.0, < 4.15.2-r0 | 4.15.2-r0 |
References
- Ubuntu CVE tracker vendor-advisory
- USN-5142-1 vendor-advisory
- USN-5174-1 vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2016-2124 vendor-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- [debian-lts-announce] 20230914 [SECURITY] [DLA 3563-1] samba security update mailing-list
- GLSA-202309-06 vendor-advisory
- www.samba.org mitigation vendor-advisory
- security.alpinelinux.org vendor-advisory