← Back

CVE-2016-2124

nvd nist
Published: Feb 18, 2022Modified: Nov 21, 2024

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

Affected (43)

Products: Samba: Samba · Debian: Debian Linux · Fedoraproject: Fedora · +2 more
Show all products
1 product
Samba
1 product
Debian Linux
1 product
Fedora
20 products
Codeready Linux Builder
Enterprise Linux
Enterprise Linux Desktop
Enterprise Linux Eus
Enterprise Linux Server
Enterprise Linux Server Aus
Enterprise Linux Server Tus
Enterprise Linux Tus
Enterprise Linux Workstation
Gluster Storage
Openstack
Virtualization Host
1 product
Ubuntu Linux
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Samba
From 3.0.0 to 4.13.14
From 4.14.0 to 4.14.10
From 4.15.0 to 4.15.2
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Version 10.0
Version 9.0
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Version 33
Version 34
Version 35
Configuration D
31 vulnerable
Vulnerable SoftwareAffected Versions
All versions
Redhat
Version 7.0
Version 8.0
Version 7.0
Redhat
Version 8.2
Version 8.4
Redhat
Version 7.0
Version 8.0
Redhat
Version 8.2
Version 8.4
Version 7.0
Redhat
Version 7.0
Version 8.0
Redhat
Version 8.2
Version 8.4
Version 7.0
Version 7.0
Version 7.0
Redhat
Version 8.2
Version 8.4
Version 8.4
Redhat
Version 8.2
Version 8.4
Version 8.2
Version 7.0
Redhat
Version 3.0
Version 3.5
Redhat
Version 13
Version 16.1
Version 16.2
Version 4.0
Configuration E
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Version 18.04
Version 20.04
Version 21.04
Version 21.10

References (8)

Source: secalert@redhat.com
Issue TrackingPatchThird Party Advisory
Source: secalert@redhat.com
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.