CVE-2016-2124
At a glance Severity Not available EPSS EPSS 1.77 % · percentile 78 (2026-10-27) State PUBLISHED Published 2022-02-18 Updated 2024-08-05 Assigner redhat NVD status Modified Description A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 3.0.0 < 4.13.14cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 4.14.0 < 4.14.10cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 4.15.0 < 4.15.2cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*cpe:2.3:a:redhat:codeready_linux_builder:-:*:*:*:*:*:*:*cpe:2.3:a:redhat:gluster_storage:3.0:*:*:*:*:*:*:*cpe:2.3:a:redhat:gluster_storage:3.5:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*cpe:2.3:a:redhat:openstack:16.2:*:*:*:*:*:*:*cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_resilient_storage:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_tus:8.2:*:*:*:*:*:*:*cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*+3 more Affected products Product Versions samba affected samba 4.15.2, samba 4.14.10, samba 4.13.14
References
Sources
