← Back

CVE-2016-2114

nvd nist
Published: Apr 25, 2016Modified: May 6, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.

Affected (75)

Samba
1 product
Samba
Canonical
1 product
Ubuntu Linux
Configuration A
72 vulnerable
Vulnerable SoftwareAffected Versions
Samba
Samba
Version 4.0.0
Samba
Version 4.0.10
Samba
Version 4.0.11
Samba
Version 4.0.12
Samba
Version 4.0.13
Samba
Version 4.0.14
Samba
Version 4.0.15
Samba
Version 4.0.16
Samba
Version 4.0.17
Samba
Version 4.0.18
Samba
Version 4.0.19
Samba
Version 4.0.1
Samba
Version 4.0.20
Samba
Version 4.0.21
Samba
Version 4.0.22
Samba
Version 4.0.23
Samba
Version 4.0.24
Samba
Version 4.0.25
Samba
Version 4.0.26
Samba
Version 4.0.2
Samba
Version 4.0.3
Samba
Version 4.0.4
Samba
Version 4.0.5
Samba
Version 4.0.6
Samba
Version 4.0.7
Samba
Version 4.0.8
Samba
Version 4.0.9
Samba
Version 4.1.0
Samba
Version 4.1.10
Samba
Version 4.1.11
Samba
Version 4.1.12
Samba
Version 4.1.13
Samba
Version 4.1.14
Samba
Version 4.1.15
Samba
Version 4.1.16
Samba
Version 4.1.17
Samba
Version 4.1.18
Samba
Version 4.1.19
Samba
Version 4.1.1
Samba
Version 4.1.20
Samba
Version 4.1.21
Samba
Version 4.1.22
Samba
Version 4.1.23
Samba
Version 4.1.2
Samba
Version 4.1.3
Samba
Version 4.1.4
Samba
Version 4.1.5
Samba
Version 4.1.6
Samba
Version 4.1.7
Samba
Version 4.1.8
Samba
Version 4.1.9
Samba
Version 4.2.0 rc1
Samba
Version 4.2.0 rc2
Samba
Version 4.2.0 rc3
Samba
Version 4.2.0 rc4
Samba
Version 4.2.1
Samba
Version 4.2.2
Samba
Version 4.2.3
Samba
Version 4.2.4
Samba
Version 4.2.5
Samba
Version 4.2.6
Samba
Version 4.2.7
Samba
Version 4.2.8
Samba
Version 4.2.9
Samba
Version 4.3.0
Samba
Version 4.3.1
Samba
Version 4.3.2
Samba
Version 4.3.3
Samba
Version 4.3.4
Samba
Version 4.3.5
Samba
Version 4.3.6
Samba
Version 4.4.0
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 14.04
Ubuntu Linux
Version 15.10
Ubuntu Linux
Version 16.04

Related CWEs

CWE-254
CWE-254

References (50)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.