medium5.9
CVE-2016-2124
A flaw was found in the way samba implemented SMB1 authentication.
Impact
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samba | Samba | from 3.0.0 before 4.13.14 from 4.14.0 before 4.14.10 from 4.15.0 before 4.15.2 |
| Debian | Debian Linux | Versions 9.0, 10.0 |
| Fedoraproject | Fedora | Versions 33, 34, 35 |
| Redhat | Codeready Linux Builder | All versions |
| Redhat | Gluster Storage | Versions 3.0, 3.5 |
| Redhat | Openstack | Versions 13, 16.1, 16.2 |
| Redhat | Virtualization Host | Version 4.0 |
| Redhat | Enterprise Linux | Versions 7.0, 8.0 |
| Redhat | Enterprise Linux Desktop | Version 7.0 |
| Redhat | Enterprise Linux Eus | Versions 8.2, 8.4 |
| Redhat | Enterprise Linux For Ibm Z Systems | Versions 7.0, 8.0 |
| Redhat | Enterprise Linux For Ibm Z Systems Eus | Versions 8.2, 8.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=2019660
- https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
- https://security.gentoo.org/glsa/202309-06
- https://www.samba.org/samba/security/CVE-2016-2124.html
- https://bugzilla.redhat.com/show_bug.cgi?id=2019660
- https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
- https://security.gentoo.org/glsa/202309-06
- https://www.samba.org/samba/security/CVE-2016-2124.html