Vulnerability-Lookup

SUSE-SU-2016:1022-1

Vulnerability from csaf_suse - Published: 2016-04-12 18:46 - Updated: 2026-09-20 12:12

Summary

Security update for samba

Severity

Important

Notes

Title of the patch: Security update for samba

Description of the patch: Samba was updated to the 4.2.x codestream, bringing some new features and security fixes (bsc#973832, FATE#320709). These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks (bsc#936862). - CVE-2016-2110: A man-in-the-middle could have downgraded NTLMSSP authentication (bsc#973031). - CVE-2016-2111: Domain controller netlogon member computer could have been spoofed (bsc#973032). - CVE-2016-2112: LDAP conenctions were vulnerable to downgrade and MITM attack (bsc#973033). - CVE-2016-2113: TLS certificate validation were missing (bsc#973034). - CVE-2016-2115: Named pipe IPC were vulnerable to MITM attacks (bsc#973036). - CVE-2016-2118: 'Badlock' DCERPC impersonation of authenticated account were possible (bsc#971965). Also the following fixes were done: - Upgrade on-disk FSRVP server state to new version; (bsc#924519). - Fix samba.tests.messaging test and prevent potential tdb corruption by removing obsolete now invalid tdb_close call; (bsc#974629). - Align fsrvp feature sources with upstream version. - Obsolete libsmbsharemodes0 from samba-libs and libsmbsharemodes-devel from samba-core-devel; (bsc#973832). - s3:utils/smbget: Fix recursive download; (bso#6482). - s3: smbd: posix_acls: Fix check for setting u:g:o entry on a filesystem with no ACL support; (bso#10489). - docs: Add example for domain logins to smbspool man page; (bso#11643). - s3-client: Add a KRB5 wrapper for smbspool; (bso#11690). - loadparm: Fix memory leak issue; (bso#11708). - lib/tsocket: Work around sockets not supporting FIONREAD; (bso#11714). - ctdb-scripts: Drop use of 'smbcontrol winbindd ip-dropped ...'; (bso#11719). - s3:smbd:open: Skip redundant call to file_set_dosmode when creating a new file; (bso#11727). - param: Fix str_list_v3 to accept ';' again; (bso#11732). - Real memeory leak(buildup) issue in loadparm; (bso#11740). - Obsolete libsmbclient from libsmbclient0 and libpdb-devel from libsamba-passdb-devel while not providing it; (bsc#972197). - Getting and setting Windows ACLs on symlinks can change permissions on link - Only obsolete but do not provide gplv2/3 package names; (bsc#968973). - Enable clustering (CTDB) support; (bsc#966271). - s3: smbd: Fix timestamp rounding inside SMB2 create; (bso#11703); (bsc#964023). - vfs_fruit: Fix renaming directories with open files; (bso#11065). - Fix MacOS finder error 36 when copying folder to Samba; (bso#11347). - s3:smbd/oplock: Obey kernel oplock setting when releasing oplocks; (bso#11400). - Fix copying files with vfs_fruit when using vfs_streams_xattr without stream prefix and type suffix; (bso#11466). - s3:libsmb: Correctly initialize the list head when keeping a list of primary followed by DFS connections; (bso#11624). - Reduce the memory footprint of empty string options; (bso#11625). - lib/async_req: Do not install async_connect_send_test; (bso#11639). - docs: Fix typos in man vfs_gpfs; (bso#11641). - smbd: make 'hide dot files' option work with 'store dos attributes = yes'; (bso#11645). - smbcacls: Fix uninitialized variable; (bso#11682). - s3:smbd: Ignore initial allocation size for directory creation; (bso#11684). - Changing log level of two entries to from 1 to 3; (bso#9912). - vfs_gpfs: Re-enable share modes; (bso#11243). - wafsamba: Also build libraries with RELRO protection; (bso#11346). - ctdb: Strip trailing spaces from nodes file; (bso#11365). - s3-smbd: Fix old DOS client doing wildcard delete - gives a attribute type of zero; (bso#11452). - nss_wins: Do not run into use after free issues when we access memory allocated on the globals and the global being reinitialized; (bso#11563). - async_req: Fix non-blocking connect(); (bso#11564). - auth: gensec: Fix a memory leak; (bso#11565). - lib: util: Make non-critical message a warning; (bso#11566). - Fix winbindd crashes with samlogon for trusted domain user; (bso#11569); (bsc#949022). - smbd: Send SMB2 oplock breaks unencrypted; (bso#11570). - ctdb: Open the RO tracking db with perms 0600 instead of 0000; (bso#11577). - manpage: Correct small typo error; (bso#11584). - s3: smbd: If EA's are turned off on a share don't allow an SMB2 create containing them; (bso#11589). - Backport some valgrind fixes from upstream master; (bso#11597). - s3: smbd: have_file_open_below() fails to enumerate open files below an open directory handle; (bso#11615). - docs: Fix some typos in the idmap config section of man 5 smb.conf; (bso#11619).

Patchnames: SUSE-SLE-DESKTOP-12-2016-605,SUSE-SLE-HA-12-2016-605,SUSE-SLE-SDK-12-2016-605,SUSE-SLE-SERVER-12-2016-605

CVE-2015-5370

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 421 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 12:libdcerpc-binding0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libdcerpc-binding0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libdcerpc0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libdcerpc0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libgensec0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libgensec0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libndr-krb5pac0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libndr-krb5pac0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libndr-nbt0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libndr-nbt0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libndr-standard0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libndr-standard0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libndr0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libndr0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libnetapi0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libnetapi0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libregistry0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamba-credentials0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamba-credentials0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamba-hostconfig0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamba-hostconfig0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamba-passdb0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamba-passdb0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamba-util0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamba-util0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamdb0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsamdb0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsmbclient-raw0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsmbclient-raw0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsmbclient0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsmbclient0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsmbconf0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsmbconf0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsmbldap0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libsmbldap0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libtevent-util0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libtevent-util0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libwbclient0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:libwbclient0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:samba-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:samba-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:samba-client-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:samba-client-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:samba-doc-0:4.2.4-18.17.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:samba-libs-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:samba-libs-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:samba-winbind-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12:samba-winbind-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12:ctdb-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12:ctdb-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc-binding0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc-binding0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc-binding0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc-binding0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc-binding0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libdcerpc0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libgensec0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libgensec0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libgensec0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libgensec0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libgensec0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-krb5pac0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-krb5pac0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-krb5pac0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-krb5pac0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-krb5pac0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-nbt0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-nbt0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-nbt0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-nbt0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-nbt0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-standard0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-standard0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-standard0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-standard0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr-standard0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libndr0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libnetapi0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libnetapi0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libnetapi0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libnetapi0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libnetapi0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libregistry0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libregistry0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libregistry0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-credentials0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-credentials0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-credentials0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-credentials0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-credentials0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-hostconfig0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-hostconfig0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-hostconfig0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-hostconfig0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-hostconfig0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-passdb0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-passdb0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-passdb0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-passdb0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-passdb0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-util0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-util0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-util0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-util0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamba-util0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamdb0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamdb0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamdb0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamdb0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsamdb0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient-raw0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient-raw0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient-raw0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient-raw0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient-raw0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbclient0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbconf0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbconf0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbconf0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbconf0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbconf0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbldap0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbldap0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbldap0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbldap0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libsmbldap0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libtevent-util0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libtevent-util0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libtevent-util0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libtevent-util0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libtevent-util0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libwbclient0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libwbclient0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libwbclient0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libwbclient0-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:libwbclient0-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-client-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-client-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-client-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-client-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-client-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-doc-0:4.2.4-18.17.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-libs-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-libs-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-libs-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-libs-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-libs-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-winbind-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-winbind-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-winbind-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-winbind-32bit-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Performance Computing 12:samba-winbind-32bit-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:ctdb-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:ctdb-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:ctdb-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-atsvc-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-atsvc-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-atsvc-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-atsvc0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-atsvc0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-atsvc0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-samr-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-samr-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-samr-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-samr0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-samr0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libdcerpc-samr0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libgensec-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libgensec-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libgensec-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-krb5pac-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-krb5pac-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-krb5pac-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-nbt-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-nbt-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-nbt-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-standard-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-standard-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libndr-standard-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libnetapi-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libnetapi-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libnetapi-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libregistry-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libregistry-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libregistry-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-credentials-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-credentials-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-credentials-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-hostconfig-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-hostconfig-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-hostconfig-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-passdb-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-passdb-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-passdb-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-policy-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-policy-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-policy-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-policy0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-policy0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-policy0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-util-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-util-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamba-util-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamdb-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamdb-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsamdb-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbclient-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbclient-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbclient-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbclient-raw-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbclient-raw-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbclient-raw-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbconf-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbconf-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbconf-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbldap-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbldap-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libsmbldap-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libtevent-util-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libtevent-util-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libtevent-util-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libwbclient-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libwbclient-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:libwbclient-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:samba-core-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:samba-core-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:samba-core-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:samba-test-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:samba-test-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12:samba-test-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:ctdb-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:ctdb-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:ctdb-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-atsvc-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-atsvc-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-atsvc-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-atsvc0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-atsvc0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-atsvc0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-samr-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-samr-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-samr-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-samr0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-samr0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libdcerpc-samr0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libgensec-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libgensec-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libgensec-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-krb5pac-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-krb5pac-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-krb5pac-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-nbt-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-nbt-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-nbt-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-standard-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-standard-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libndr-standard-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libnetapi-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libnetapi-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libnetapi-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libregistry-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libregistry-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libregistry-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-credentials-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-credentials-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-credentials-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-hostconfig-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-hostconfig-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-hostconfig-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-passdb-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-passdb-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-passdb-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-policy-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-policy-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-policy-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-policy0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-policy0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-policy0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-util-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-util-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamba-util-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamdb-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamdb-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsamdb-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbclient-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbclient-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbclient-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbclient-raw-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbclient-raw-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbclient-raw-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbconf-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbconf-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbconf-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbldap-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbldap-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libsmbldap-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libtevent-util-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libtevent-util-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libtevent-util-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libwbclient-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libwbclient-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:libwbclient-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:samba-core-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:samba-core-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:samba-core-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:samba-test-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:samba-test-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12:samba-test-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:ctdb-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:ctdb-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:ctdb-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-atsvc-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-atsvc-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-atsvc-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-atsvc0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-atsvc0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-atsvc0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-samr-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-samr-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-samr-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-samr0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-samr0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libdcerpc-samr0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libgensec-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libgensec-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libgensec-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-krb5pac-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-krb5pac-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-krb5pac-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-nbt-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-nbt-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-nbt-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-standard-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-standard-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libndr-standard-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libnetapi-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libnetapi-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libnetapi-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libregistry-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libregistry-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libregistry-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-credentials-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-credentials-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-credentials-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-hostconfig-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-hostconfig-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-hostconfig-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-passdb-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-passdb-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-passdb-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-policy-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-policy-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-policy-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-policy0-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-policy0-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-policy0-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-util-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-util-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamba-util-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamdb-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamdb-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsamdb-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbclient-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbclient-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbclient-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbclient-raw-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbclient-raw-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbclient-raw-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbconf-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbconf-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbconf-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbldap-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbldap-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libsmbldap-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libtevent-util-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libtevent-util-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libtevent-util-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libwbclient-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libwbclient-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:libwbclient-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:samba-core-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:samba-core-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:samba-core-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:samba-test-devel-0:4.2.4-18.17.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:samba-test-devel-0:4.2.4-18.17.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12:samba-test-devel-0:4.2.4-18.17.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2016-2110

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 421 products, the same list as for CVE-2015-5370

Threats

Impact moderate

CVE-2016-2111

6.3 (Medium)


                
                  CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

Recommended 421 products, the same list as for CVE-2015-5370

Threats

Impact moderate

CVE-2016-2112

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 421 products, the same list as for CVE-2015-5370

Threats

Impact moderate

CVE-2016-2113

7.4 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 421 products, the same list as for CVE-2015-5370

Threats

Impact moderate

CVE-2016-2115

5.9 (Medium)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 421 products, the same list as for CVE-2015-5370

Threats

Impact moderate

CVE-2016-2118

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Recommended 421 products, the same list as for CVE-2015-5370

Threats

Impact moderate

References

65 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/320709	self
https://bugzilla.suse.com/913547	self
https://bugzilla.suse.com/919309	self
https://bugzilla.suse.com/924519	self
https://bugzilla.suse.com/936862	self
https://bugzilla.suse.com/942716	self
https://bugzilla.suse.com/946051	self
https://bugzilla.suse.com/949022	self
https://bugzilla.suse.com/964023	self
https://bugzilla.suse.com/966271	self
https://bugzilla.suse.com/968973	self
https://bugzilla.suse.com/971965	self
https://bugzilla.suse.com/972197	self
https://bugzilla.suse.com/973031	self
https://bugzilla.suse.com/973032	self
https://bugzilla.suse.com/973033	self
https://bugzilla.suse.com/973034	self
https://bugzilla.suse.com/973036	self
https://bugzilla.suse.com/973832	self
https://bugzilla.suse.com/974629	self
https://www.suse.com/security/cve/CVE-2015-5370/	self
https://www.suse.com/security/cve/CVE-2016-2110/	self
https://www.suse.com/security/cve/CVE-2016-2111/	self
https://www.suse.com/security/cve/CVE-2016-2112/	self
https://www.suse.com/security/cve/CVE-2016-2113/	self
https://www.suse.com/security/cve/CVE-2016-2115/	self
https://www.suse.com/security/cve/CVE-2016-2118/	self
https://www.suse.com/security/cve/CVE-2015-5370	external
https://bugzilla.suse.com/936862	external
https://bugzilla.suse.com/975276	external
https://bugzilla.suse.com/977416	external
https://www.suse.com/security/cve/CVE-2016-2110	external
https://bugzilla.suse.com/1009711	external
https://bugzilla.suse.com/973031	external
https://bugzilla.suse.com/973033	external
https://bugzilla.suse.com/973036	external
https://bugzilla.suse.com/975276	external
https://bugzilla.suse.com/977416	external
https://www.suse.com/security/cve/CVE-2016-2111	external
https://bugzilla.suse.com/973032	external
https://bugzilla.suse.com/975276	external
https://bugzilla.suse.com/977416	external
https://www.suse.com/security/cve/CVE-2016-2112	external
https://bugzilla.suse.com/973031	external
https://bugzilla.suse.com/973033	external
https://bugzilla.suse.com/975276	external
https://bugzilla.suse.com/977416	external
https://www.suse.com/security/cve/CVE-2016-2113	external
https://bugzilla.suse.com/973031	external
https://bugzilla.suse.com/973033	external
https://bugzilla.suse.com/973034	external
https://bugzilla.suse.com/975276	external
https://bugzilla.suse.com/977416	external
https://www.suse.com/security/cve/CVE-2016-2115	external
https://bugzilla.suse.com/973036	external
https://bugzilla.suse.com/975276	external
https://bugzilla.suse.com/977416	external
https://www.suse.com/security/cve/CVE-2016-2118	external
https://bugzilla.suse.com/971965	external
https://bugzilla.suse.com/975276	external
https://bugzilla.suse.com/977416	external

JSON

To clipboard

Loading 1.2 MB of JSON…

CVE-2015-5370 (GCVE-0-2015-5370)

Vulnerability from cvelistv5 – Published: 2016-04-25 00:00 – Updated: 2024-08-06 06:41

Summary

Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

34 references

URL	Tags
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0612.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2950-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0613.html	vendor-advisoryx_refsource_REDHAT
http://badlock.org/	x_refsource_MISC
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2950-5	vendor-advisoryx_refsource_UBUNTU
https://www.samba.org/samba/history/samba-4.2.10.html	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0624.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0618.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.samba.org/samba/latest_news.html#4.4.2	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035533	vdb-entryx_refsource_SECTRACK
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0614.html	vendor-advisoryx_refsource_REDHAT
https://www.samba.org/samba/security/CVE-2015-5370.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0620.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0611.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bto.bluecoat.com/security-advisory/sa122	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-3	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0619.html	vendor-advisoryx_refsource_REDHAT
http://www.debian.org/security/2016/dsa-3548	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2950-2	vendor-advisoryx_refsource_UBUNTU
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-4	vendor-advisoryx_refsource_UBUNTU

Date Public

2016-04-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:41:09.352Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSA:2016-106-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
          },
          {
            "name": "SUSE-SU-2016:1022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
          },
          {
            "name": "RHSA-2016:0612",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
          },
          {
            "name": "USN-2950-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-1"
          },
          {
            "name": "SUSE-SU-2016:1028",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
          },
          {
            "name": "RHSA-2016:0613",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://badlock.org/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "openSUSE-SU-2016:1064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
          },
          {
            "name": "USN-2950-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
          },
          {
            "name": "FEDORA-2016-be53260726",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
          },
          {
            "name": "RHSA-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
          },
          {
            "name": "RHSA-2016:0618",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
          },
          {
            "name": "SUSE-SU-2016:1024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
          },
          {
            "name": "SUSE-SU-2016:1023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
          },
          {
            "name": "1035533",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035533"
          },
          {
            "name": "FEDORA-2016-48b3761baa",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
          },
          {
            "name": "RHSA-2016:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/security/CVE-2015-5370.html"
          },
          {
            "name": "openSUSE-SU-2016:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
          },
          {
            "name": "RHSA-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
          },
          {
            "name": "RHSA-2016:0611",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
          },
          {
            "name": "openSUSE-SU-2016:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa122"
          },
          {
            "name": "USN-2950-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-3"
          },
          {
            "name": "FEDORA-2016-383fce04e2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
          },
          {
            "name": "openSUSE-SU-2016:1107",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
          },
          {
            "name": "RHSA-2016:0619",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
          },
          {
            "name": "DSA-3548",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3548"
          },
          {
            "name": "USN-2950-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
          },
          {
            "name": "USN-2950-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-30T20:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "SSA:2016-106-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
        },
        {
          "name": "SUSE-SU-2016:1022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
        },
        {
          "name": "RHSA-2016:0612",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
        },
        {
          "name": "USN-2950-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-1"
        },
        {
          "name": "SUSE-SU-2016:1028",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
        },
        {
          "name": "RHSA-2016:0613",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://badlock.org/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "openSUSE-SU-2016:1064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
        },
        {
          "name": "USN-2950-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
        },
        {
          "name": "FEDORA-2016-be53260726",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
        },
        {
          "name": "RHSA-2016:0624",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
        },
        {
          "name": "RHSA-2016:0618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
        },
        {
          "name": "SUSE-SU-2016:1024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
        },
        {
          "name": "SUSE-SU-2016:1023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
        },
        {
          "name": "1035533",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035533"
        },
        {
          "name": "FEDORA-2016-48b3761baa",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
        },
        {
          "name": "RHSA-2016:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/security/CVE-2015-5370.html"
        },
        {
          "name": "openSUSE-SU-2016:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
        },
        {
          "name": "RHSA-2016:0620",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
        },
        {
          "name": "RHSA-2016:0611",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
        },
        {
          "name": "openSUSE-SU-2016:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa122"
        },
        {
          "name": "USN-2950-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-3"
        },
        {
          "name": "FEDORA-2016-383fce04e2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
        },
        {
          "name": "openSUSE-SU-2016:1107",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
        },
        {
          "name": "RHSA-2016:0619",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
        },
        {
          "name": "DSA-3548",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3548"
        },
        {
          "name": "USN-2950-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
        },
        {
          "name": "USN-2950-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-5370",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC layer, which allows remote attackers to perform protocol-downgrade attacks, cause a denial of service (application crash or CPU consumption), or possibly execute arbitrary code on a client system via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSA:2016-106-02",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
            },
            {
              "name": "SUSE-SU-2016:1022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
            },
            {
              "name": "RHSA-2016:0612",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
            },
            {
              "name": "USN-2950-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-1"
            },
            {
              "name": "SUSE-SU-2016:1028",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
            },
            {
              "name": "RHSA-2016:0613",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
            },
            {
              "name": "http://badlock.org/",
              "refsource": "MISC",
              "url": "http://badlock.org/"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "openSUSE-SU-2016:1064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
            },
            {
              "name": "USN-2950-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-5"
            },
            {
              "name": "https://www.samba.org/samba/history/samba-4.2.10.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
            },
            {
              "name": "FEDORA-2016-be53260726",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
            },
            {
              "name": "RHSA-2016:0624",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
            },
            {
              "name": "RHSA-2016:0618",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
            },
            {
              "name": "SUSE-SU-2016:1024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
            },
            {
              "name": "SUSE-SU-2016:1023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
            },
            {
              "name": "https://www.samba.org/samba/latest_news.html#4.4.2",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
            },
            {
              "name": "1035533",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035533"
            },
            {
              "name": "FEDORA-2016-48b3761baa",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
            },
            {
              "name": "RHSA-2016:0614",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
            },
            {
              "name": "https://www.samba.org/samba/security/CVE-2015-5370.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/security/CVE-2015-5370.html"
            },
            {
              "name": "openSUSE-SU-2016:1025",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
            },
            {
              "name": "RHSA-2016:0620",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
            },
            {
              "name": "RHSA-2016:0611",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
            },
            {
              "name": "openSUSE-SU-2016:1106",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa122",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa122"
            },
            {
              "name": "USN-2950-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-3"
            },
            {
              "name": "FEDORA-2016-383fce04e2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
            },
            {
              "name": "openSUSE-SU-2016:1107",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
            },
            {
              "name": "RHSA-2016:0619",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
            },
            {
              "name": "DSA-3548",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3548"
            },
            {
              "name": "USN-2950-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
            },
            {
              "name": "USN-2950-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-5370",
    "datePublished": "2016-04-25T00:00:00.000Z",
    "dateReserved": "2015-07-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:41:09.352Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2110 (GCVE-0-2016-2110)

Vulnerability from cvelistv5 – Published: 2016-04-25 00:00 – Updated: 2024-08-05 23:17

Summary

The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

42 references

URL	Tags
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0612.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-updates/2016-0…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2950-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0613.html	vendor-advisoryx_refsource_REDHAT
http://badlock.org/	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2016-0621.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2950-5	vendor-advisoryx_refsource_UBUNTU
https://www.samba.org/samba/history/samba-4.2.10.html	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0624.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0618.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.samba.org/samba/latest_news.html#4.4.2	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035533	vdb-entryx_refsource_SECTRACK
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0614.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0620.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0611.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bto.bluecoat.com/security-advisory/sa122	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-3	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.samba.org/samba/security/CVE-2016-2110.html	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-0619.html	vendor-advisoryx_refsource_REDHAT
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
https://h20566.www2.hpe.com/hpsc/doc/public/displ…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201612-47	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3548	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0623.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2950-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2016-0625.html	vendor-advisoryx_refsource_REDHAT
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-4	vendor-advisoryx_refsource_UBUNTU

Date Public

2016-04-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.577Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSA:2016-106-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
          },
          {
            "name": "SUSE-SU-2016:1022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
          },
          {
            "name": "RHSA-2016:0612",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
          },
          {
            "name": "openSUSE-SU-2016:1440",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00124.html"
          },
          {
            "name": "USN-2950-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-1"
          },
          {
            "name": "SUSE-SU-2016:1028",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
          },
          {
            "name": "RHSA-2016:0613",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://badlock.org/"
          },
          {
            "name": "RHSA-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0621.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "openSUSE-SU-2016:1064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
          },
          {
            "name": "USN-2950-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
          },
          {
            "name": "FEDORA-2016-be53260726",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
          },
          {
            "name": "RHSA-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
          },
          {
            "name": "RHSA-2016:0618",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
          },
          {
            "name": "SUSE-SU-2016:1024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
          },
          {
            "name": "SUSE-SU-2016:1023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
          },
          {
            "name": "1035533",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035533"
          },
          {
            "name": "FEDORA-2016-48b3761baa",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
          },
          {
            "name": "SUSE-SU-2016:1105",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html"
          },
          {
            "name": "RHSA-2016:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
          },
          {
            "name": "openSUSE-SU-2016:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
          },
          {
            "name": "RHSA-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
          },
          {
            "name": "RHSA-2016:0611",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
          },
          {
            "name": "openSUSE-SU-2016:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa122"
          },
          {
            "name": "USN-2950-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-3"
          },
          {
            "name": "FEDORA-2016-383fce04e2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
          },
          {
            "name": "openSUSE-SU-2016:1107",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/security/CVE-2016-2110.html"
          },
          {
            "name": "RHSA-2016:0619",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
          },
          {
            "name": "GLSA-201612-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-47"
          },
          {
            "name": "DSA-3548",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3548"
          },
          {
            "name": "RHSA-2016:0623",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0623.html"
          },
          {
            "name": "USN-2950-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-2"
          },
          {
            "name": "RHSA-2016:0625",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0625.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
          },
          {
            "name": "USN-2950-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T21:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SSA:2016-106-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
        },
        {
          "name": "SUSE-SU-2016:1022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
        },
        {
          "name": "RHSA-2016:0612",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
        },
        {
          "name": "openSUSE-SU-2016:1440",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00124.html"
        },
        {
          "name": "USN-2950-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-1"
        },
        {
          "name": "SUSE-SU-2016:1028",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
        },
        {
          "name": "RHSA-2016:0613",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://badlock.org/"
        },
        {
          "name": "RHSA-2016:0621",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0621.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "openSUSE-SU-2016:1064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
        },
        {
          "name": "USN-2950-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
        },
        {
          "name": "FEDORA-2016-be53260726",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
        },
        {
          "name": "RHSA-2016:0624",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
        },
        {
          "name": "RHSA-2016:0618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
        },
        {
          "name": "SUSE-SU-2016:1024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
        },
        {
          "name": "SUSE-SU-2016:1023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
        },
        {
          "name": "1035533",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035533"
        },
        {
          "name": "FEDORA-2016-48b3761baa",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
        },
        {
          "name": "SUSE-SU-2016:1105",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html"
        },
        {
          "name": "RHSA-2016:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
        },
        {
          "name": "openSUSE-SU-2016:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
        },
        {
          "name": "RHSA-2016:0620",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
        },
        {
          "name": "RHSA-2016:0611",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
        },
        {
          "name": "openSUSE-SU-2016:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa122"
        },
        {
          "name": "USN-2950-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-3"
        },
        {
          "name": "FEDORA-2016-383fce04e2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
        },
        {
          "name": "openSUSE-SU-2016:1107",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/security/CVE-2016-2110.html"
        },
        {
          "name": "RHSA-2016:0619",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
        },
        {
          "name": "GLSA-201612-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-47"
        },
        {
          "name": "DSA-3548",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3548"
        },
        {
          "name": "RHSA-2016:0623",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0623.html"
        },
        {
          "name": "USN-2950-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-2"
        },
        {
          "name": "RHSA-2016:0625",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0625.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
        },
        {
          "name": "USN-2950-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-2110",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 allows man-in-the-middle attackers to perform protocol-downgrade attacks by modifying the client-server data stream to remove application-layer flags or encryption settings, as demonstrated by clearing the NTLMSSP_NEGOTIATE_SEAL or NTLMSSP_NEGOTIATE_SIGN option to disrupt LDAP security."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSA:2016-106-02",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
            },
            {
              "name": "SUSE-SU-2016:1022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
            },
            {
              "name": "RHSA-2016:0612",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
            },
            {
              "name": "openSUSE-SU-2016:1440",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-updates/2016-05/msg00124.html"
            },
            {
              "name": "USN-2950-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-1"
            },
            {
              "name": "SUSE-SU-2016:1028",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
            },
            {
              "name": "RHSA-2016:0613",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
            },
            {
              "name": "http://badlock.org/",
              "refsource": "MISC",
              "url": "http://badlock.org/"
            },
            {
              "name": "RHSA-2016:0621",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0621.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "openSUSE-SU-2016:1064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
            },
            {
              "name": "USN-2950-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-5"
            },
            {
              "name": "https://www.samba.org/samba/history/samba-4.2.10.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
            },
            {
              "name": "FEDORA-2016-be53260726",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
            },
            {
              "name": "RHSA-2016:0624",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
            },
            {
              "name": "RHSA-2016:0618",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
            },
            {
              "name": "SUSE-SU-2016:1024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
            },
            {
              "name": "SUSE-SU-2016:1023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
            },
            {
              "name": "https://www.samba.org/samba/latest_news.html#4.4.2",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
            },
            {
              "name": "1035533",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035533"
            },
            {
              "name": "FEDORA-2016-48b3761baa",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
            },
            {
              "name": "SUSE-SU-2016:1105",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html"
            },
            {
              "name": "RHSA-2016:0614",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
            },
            {
              "name": "openSUSE-SU-2016:1025",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
            },
            {
              "name": "RHSA-2016:0620",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
            },
            {
              "name": "RHSA-2016:0611",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
            },
            {
              "name": "openSUSE-SU-2016:1106",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa122",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa122"
            },
            {
              "name": "USN-2950-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-3"
            },
            {
              "name": "FEDORA-2016-383fce04e2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
            },
            {
              "name": "openSUSE-SU-2016:1107",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
            },
            {
              "name": "https://www.samba.org/samba/security/CVE-2016-2110.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/security/CVE-2016-2110.html"
            },
            {
              "name": "RHSA-2016:0619",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
            },
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
            },
            {
              "name": "GLSA-201612-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-47"
            },
            {
              "name": "DSA-3548",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3548"
            },
            {
              "name": "RHSA-2016:0623",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0623.html"
            },
            {
              "name": "USN-2950-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-2"
            },
            {
              "name": "RHSA-2016:0625",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0625.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
            },
            {
              "name": "USN-2950-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-2110",
    "datePublished": "2016-04-25T00:00:00.000Z",
    "dateReserved": "2016-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:17:50.577Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2111 (GCVE-0-2016-2111)

Vulnerability from cvelistv5 – Published: 2016-04-25 00:00 – Updated: 2024-08-05 23:17

Summary

The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

41 references

URL	Tags
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0612.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2950-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0613.html	vendor-advisoryx_refsource_REDHAT
http://badlock.org/	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2016-0621.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2950-5	vendor-advisoryx_refsource_UBUNTU
https://www.samba.org/samba/history/samba-4.2.10.html	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0624.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0618.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.samba.org/samba/latest_news.html#4.4.2	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035533	vdb-entryx_refsource_SECTRACK
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0614.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0620.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0611.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bto.bluecoat.com/security-advisory/sa122	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-3	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0619.html	vendor-advisoryx_refsource_REDHAT
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
https://www.samba.org/samba/security/CVE-2016-2111.html	x_refsource_CONFIRM
https://h20566.www2.hpe.com/hpsc/doc/public/displ…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201612-47	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3548	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0623.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2950-2	vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2016-0625.html	vendor-advisoryx_refsource_REDHAT
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-4	vendor-advisoryx_refsource_UBUNTU

Date Public

2016-04-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.693Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSA:2016-106-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
          },
          {
            "name": "SUSE-SU-2016:1022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
          },
          {
            "name": "RHSA-2016:0612",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
          },
          {
            "name": "USN-2950-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-1"
          },
          {
            "name": "SUSE-SU-2016:1028",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
          },
          {
            "name": "RHSA-2016:0613",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://badlock.org/"
          },
          {
            "name": "RHSA-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0621.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "openSUSE-SU-2016:1064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
          },
          {
            "name": "USN-2950-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
          },
          {
            "name": "FEDORA-2016-be53260726",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
          },
          {
            "name": "RHSA-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
          },
          {
            "name": "RHSA-2016:0618",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
          },
          {
            "name": "SUSE-SU-2016:1024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
          },
          {
            "name": "SUSE-SU-2016:1023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
          },
          {
            "name": "1035533",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035533"
          },
          {
            "name": "FEDORA-2016-48b3761baa",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
          },
          {
            "name": "SUSE-SU-2016:1105",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html"
          },
          {
            "name": "RHSA-2016:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
          },
          {
            "name": "openSUSE-SU-2016:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
          },
          {
            "name": "RHSA-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
          },
          {
            "name": "RHSA-2016:0611",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
          },
          {
            "name": "openSUSE-SU-2016:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa122"
          },
          {
            "name": "USN-2950-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-3"
          },
          {
            "name": "FEDORA-2016-383fce04e2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
          },
          {
            "name": "openSUSE-SU-2016:1107",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
          },
          {
            "name": "RHSA-2016:0619",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/security/CVE-2016-2111.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
          },
          {
            "name": "GLSA-201612-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-47"
          },
          {
            "name": "DSA-3548",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3548"
          },
          {
            "name": "RHSA-2016:0623",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0623.html"
          },
          {
            "name": "USN-2950-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-2"
          },
          {
            "name": "RHSA-2016:0625",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0625.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
          },
          {
            "name": "USN-2950-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel\u0027s endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T21:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SSA:2016-106-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
        },
        {
          "name": "SUSE-SU-2016:1022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
        },
        {
          "name": "RHSA-2016:0612",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
        },
        {
          "name": "USN-2950-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-1"
        },
        {
          "name": "SUSE-SU-2016:1028",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
        },
        {
          "name": "RHSA-2016:0613",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://badlock.org/"
        },
        {
          "name": "RHSA-2016:0621",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0621.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "openSUSE-SU-2016:1064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
        },
        {
          "name": "USN-2950-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
        },
        {
          "name": "FEDORA-2016-be53260726",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
        },
        {
          "name": "RHSA-2016:0624",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
        },
        {
          "name": "RHSA-2016:0618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
        },
        {
          "name": "SUSE-SU-2016:1024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
        },
        {
          "name": "SUSE-SU-2016:1023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
        },
        {
          "name": "1035533",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035533"
        },
        {
          "name": "FEDORA-2016-48b3761baa",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
        },
        {
          "name": "SUSE-SU-2016:1105",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html"
        },
        {
          "name": "RHSA-2016:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
        },
        {
          "name": "openSUSE-SU-2016:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
        },
        {
          "name": "RHSA-2016:0620",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
        },
        {
          "name": "RHSA-2016:0611",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
        },
        {
          "name": "openSUSE-SU-2016:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa122"
        },
        {
          "name": "USN-2950-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-3"
        },
        {
          "name": "FEDORA-2016-383fce04e2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
        },
        {
          "name": "openSUSE-SU-2016:1107",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
        },
        {
          "name": "RHSA-2016:0619",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/security/CVE-2016-2111.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
        },
        {
          "name": "GLSA-201612-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-47"
        },
        {
          "name": "DSA-3548",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3548"
        },
        {
          "name": "RHSA-2016:0623",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0623.html"
        },
        {
          "name": "USN-2950-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-2"
        },
        {
          "name": "RHSA-2016:0625",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0625.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
        },
        {
          "name": "USN-2950-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-2111",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel\u0027s endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSA:2016-106-02",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
            },
            {
              "name": "SUSE-SU-2016:1022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
            },
            {
              "name": "RHSA-2016:0612",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
            },
            {
              "name": "USN-2950-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-1"
            },
            {
              "name": "SUSE-SU-2016:1028",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
            },
            {
              "name": "RHSA-2016:0613",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
            },
            {
              "name": "http://badlock.org/",
              "refsource": "MISC",
              "url": "http://badlock.org/"
            },
            {
              "name": "RHSA-2016:0621",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0621.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "openSUSE-SU-2016:1064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
            },
            {
              "name": "USN-2950-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-5"
            },
            {
              "name": "https://www.samba.org/samba/history/samba-4.2.10.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
            },
            {
              "name": "FEDORA-2016-be53260726",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
            },
            {
              "name": "RHSA-2016:0624",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
            },
            {
              "name": "RHSA-2016:0618",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
            },
            {
              "name": "SUSE-SU-2016:1024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
            },
            {
              "name": "SUSE-SU-2016:1023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
            },
            {
              "name": "https://www.samba.org/samba/latest_news.html#4.4.2",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
            },
            {
              "name": "1035533",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035533"
            },
            {
              "name": "FEDORA-2016-48b3761baa",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
            },
            {
              "name": "SUSE-SU-2016:1105",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00046.html"
            },
            {
              "name": "RHSA-2016:0614",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
            },
            {
              "name": "openSUSE-SU-2016:1025",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
            },
            {
              "name": "RHSA-2016:0620",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
            },
            {
              "name": "RHSA-2016:0611",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
            },
            {
              "name": "openSUSE-SU-2016:1106",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa122",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa122"
            },
            {
              "name": "USN-2950-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-3"
            },
            {
              "name": "FEDORA-2016-383fce04e2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
            },
            {
              "name": "openSUSE-SU-2016:1107",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
            },
            {
              "name": "RHSA-2016:0619",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
            },
            {
              "name": "https://www.samba.org/samba/security/CVE-2016-2111.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/security/CVE-2016-2111.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
            },
            {
              "name": "GLSA-201612-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-47"
            },
            {
              "name": "DSA-3548",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3548"
            },
            {
              "name": "RHSA-2016:0623",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0623.html"
            },
            {
              "name": "USN-2950-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-2"
            },
            {
              "name": "RHSA-2016:0625",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0625.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
            },
            {
              "name": "USN-2950-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-2111",
    "datePublished": "2016-04-25T00:00:00.000Z",
    "dateReserved": "2016-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:17:50.693Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2112 (GCVE-0-2016-2112)

Vulnerability from cvelistv5 – Published: 2016-04-25 00:00 – Updated: 2024-08-05 23:17

Summary

The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

37 references

URL	Tags
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0612.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2950-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0613.html	vendor-advisoryx_refsource_REDHAT
http://badlock.org/	x_refsource_MISC
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2950-5	vendor-advisoryx_refsource_UBUNTU
https://www.samba.org/samba/history/samba-4.2.10.html	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0624.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0618.html	vendor-advisoryx_refsource_REDHAT
https://www.samba.org/samba/security/CVE-2016-2112.html	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.samba.org/samba/latest_news.html#4.4.2	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035533	vdb-entryx_refsource_SECTRACK
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0614.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0620.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0611.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bto.bluecoat.com/security-advisory/sa122	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-3	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0619.html	vendor-advisoryx_refsource_REDHAT
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
https://h20566.www2.hpe.com/hpsc/doc/public/displ…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201612-47	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3548	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2950-2	vendor-advisoryx_refsource_UBUNTU
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-4	vendor-advisoryx_refsource_UBUNTU

Date Public

2016-04-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.593Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSA:2016-106-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
          },
          {
            "name": "SUSE-SU-2016:1022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
          },
          {
            "name": "RHSA-2016:0612",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
          },
          {
            "name": "USN-2950-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-1"
          },
          {
            "name": "SUSE-SU-2016:1028",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
          },
          {
            "name": "RHSA-2016:0613",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://badlock.org/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "openSUSE-SU-2016:1064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
          },
          {
            "name": "USN-2950-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
          },
          {
            "name": "FEDORA-2016-be53260726",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
          },
          {
            "name": "RHSA-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
          },
          {
            "name": "RHSA-2016:0618",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/security/CVE-2016-2112.html"
          },
          {
            "name": "SUSE-SU-2016:1024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
          },
          {
            "name": "SUSE-SU-2016:1023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
          },
          {
            "name": "1035533",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035533"
          },
          {
            "name": "FEDORA-2016-48b3761baa",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
          },
          {
            "name": "RHSA-2016:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
          },
          {
            "name": "openSUSE-SU-2016:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
          },
          {
            "name": "RHSA-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
          },
          {
            "name": "RHSA-2016:0611",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
          },
          {
            "name": "openSUSE-SU-2016:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa122"
          },
          {
            "name": "USN-2950-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-3"
          },
          {
            "name": "FEDORA-2016-383fce04e2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
          },
          {
            "name": "openSUSE-SU-2016:1107",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
          },
          {
            "name": "RHSA-2016:0619",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
          },
          {
            "name": "GLSA-201612-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-47"
          },
          {
            "name": "DSA-3548",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3548"
          },
          {
            "name": "USN-2950-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
          },
          {
            "name": "USN-2950-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the \"client ldap sasl wrapping\" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T21:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SSA:2016-106-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
        },
        {
          "name": "SUSE-SU-2016:1022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
        },
        {
          "name": "RHSA-2016:0612",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
        },
        {
          "name": "USN-2950-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-1"
        },
        {
          "name": "SUSE-SU-2016:1028",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
        },
        {
          "name": "RHSA-2016:0613",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://badlock.org/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "openSUSE-SU-2016:1064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
        },
        {
          "name": "USN-2950-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
        },
        {
          "name": "FEDORA-2016-be53260726",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
        },
        {
          "name": "RHSA-2016:0624",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
        },
        {
          "name": "RHSA-2016:0618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/security/CVE-2016-2112.html"
        },
        {
          "name": "SUSE-SU-2016:1024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
        },
        {
          "name": "SUSE-SU-2016:1023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
        },
        {
          "name": "1035533",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035533"
        },
        {
          "name": "FEDORA-2016-48b3761baa",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
        },
        {
          "name": "RHSA-2016:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
        },
        {
          "name": "openSUSE-SU-2016:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
        },
        {
          "name": "RHSA-2016:0620",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
        },
        {
          "name": "RHSA-2016:0611",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
        },
        {
          "name": "openSUSE-SU-2016:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa122"
        },
        {
          "name": "USN-2950-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-3"
        },
        {
          "name": "FEDORA-2016-383fce04e2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
        },
        {
          "name": "openSUSE-SU-2016:1107",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
        },
        {
          "name": "RHSA-2016:0619",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
        },
        {
          "name": "GLSA-201612-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-47"
        },
        {
          "name": "DSA-3548",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3548"
        },
        {
          "name": "USN-2950-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
        },
        {
          "name": "USN-2950-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-2112",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the \"client ldap sasl wrapping\" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSA:2016-106-02",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
            },
            {
              "name": "SUSE-SU-2016:1022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
            },
            {
              "name": "RHSA-2016:0612",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
            },
            {
              "name": "USN-2950-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-1"
            },
            {
              "name": "SUSE-SU-2016:1028",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
            },
            {
              "name": "RHSA-2016:0613",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
            },
            {
              "name": "http://badlock.org/",
              "refsource": "MISC",
              "url": "http://badlock.org/"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "openSUSE-SU-2016:1064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
            },
            {
              "name": "USN-2950-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-5"
            },
            {
              "name": "https://www.samba.org/samba/history/samba-4.2.10.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
            },
            {
              "name": "FEDORA-2016-be53260726",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
            },
            {
              "name": "RHSA-2016:0624",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
            },
            {
              "name": "RHSA-2016:0618",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
            },
            {
              "name": "https://www.samba.org/samba/security/CVE-2016-2112.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/security/CVE-2016-2112.html"
            },
            {
              "name": "SUSE-SU-2016:1024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
            },
            {
              "name": "SUSE-SU-2016:1023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
            },
            {
              "name": "https://www.samba.org/samba/latest_news.html#4.4.2",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
            },
            {
              "name": "1035533",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035533"
            },
            {
              "name": "FEDORA-2016-48b3761baa",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
            },
            {
              "name": "RHSA-2016:0614",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
            },
            {
              "name": "openSUSE-SU-2016:1025",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
            },
            {
              "name": "RHSA-2016:0620",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
            },
            {
              "name": "RHSA-2016:0611",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
            },
            {
              "name": "openSUSE-SU-2016:1106",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa122",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa122"
            },
            {
              "name": "USN-2950-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-3"
            },
            {
              "name": "FEDORA-2016-383fce04e2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
            },
            {
              "name": "openSUSE-SU-2016:1107",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
            },
            {
              "name": "RHSA-2016:0619",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
            },
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
            },
            {
              "name": "GLSA-201612-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-47"
            },
            {
              "name": "DSA-3548",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3548"
            },
            {
              "name": "USN-2950-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
            },
            {
              "name": "USN-2950-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-2112",
    "datePublished": "2016-04-25T00:00:00.000Z",
    "dateReserved": "2016-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:17:50.593Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2113 (GCVE-0-2016-2113)

Vulnerability from cvelistv5 – Published: 2016-04-25 00:00 – Updated: 2024-08-05 23:17

Summary

Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

30 references

URL	Tags
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0612.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2950-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://badlock.org/	x_refsource_MISC
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2950-5	vendor-advisoryx_refsource_UBUNTU
https://www.samba.org/samba/history/samba-4.2.10.html	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0618.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.samba.org/samba/latest_news.html#4.4.2	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035533	vdb-entryx_refsource_SECTRACK
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0614.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0620.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bto.bluecoat.com/security-advisory/sa122	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-3	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://security.gentoo.org/glsa/201612-47	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3548	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2950-2	vendor-advisoryx_refsource_UBUNTU
https://www.samba.org/samba/security/CVE-2016-2113.html	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-4	vendor-advisoryx_refsource_UBUNTU

Date Public

2016-04-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.580Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSA:2016-106-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
          },
          {
            "name": "SUSE-SU-2016:1022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
          },
          {
            "name": "RHSA-2016:0612",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
          },
          {
            "name": "USN-2950-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-1"
          },
          {
            "name": "SUSE-SU-2016:1028",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://badlock.org/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "openSUSE-SU-2016:1064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
          },
          {
            "name": "USN-2950-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
          },
          {
            "name": "FEDORA-2016-be53260726",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
          },
          {
            "name": "RHSA-2016:0618",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
          },
          {
            "name": "SUSE-SU-2016:1024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
          },
          {
            "name": "SUSE-SU-2016:1023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
          },
          {
            "name": "1035533",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035533"
          },
          {
            "name": "FEDORA-2016-48b3761baa",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
          },
          {
            "name": "RHSA-2016:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
          },
          {
            "name": "openSUSE-SU-2016:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
          },
          {
            "name": "RHSA-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
          },
          {
            "name": "openSUSE-SU-2016:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa122"
          },
          {
            "name": "USN-2950-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-3"
          },
          {
            "name": "FEDORA-2016-383fce04e2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
          },
          {
            "name": "openSUSE-SU-2016:1107",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
          },
          {
            "name": "GLSA-201612-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-47"
          },
          {
            "name": "DSA-3548",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3548"
          },
          {
            "name": "USN-2950-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/security/CVE-2016-2113.html"
          },
          {
            "name": "USN-2950-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T21:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SSA:2016-106-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
        },
        {
          "name": "SUSE-SU-2016:1022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
        },
        {
          "name": "RHSA-2016:0612",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
        },
        {
          "name": "USN-2950-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-1"
        },
        {
          "name": "SUSE-SU-2016:1028",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://badlock.org/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "openSUSE-SU-2016:1064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
        },
        {
          "name": "USN-2950-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
        },
        {
          "name": "FEDORA-2016-be53260726",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
        },
        {
          "name": "RHSA-2016:0618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
        },
        {
          "name": "SUSE-SU-2016:1024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
        },
        {
          "name": "SUSE-SU-2016:1023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
        },
        {
          "name": "1035533",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035533"
        },
        {
          "name": "FEDORA-2016-48b3761baa",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
        },
        {
          "name": "RHSA-2016:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
        },
        {
          "name": "openSUSE-SU-2016:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
        },
        {
          "name": "RHSA-2016:0620",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
        },
        {
          "name": "openSUSE-SU-2016:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa122"
        },
        {
          "name": "USN-2950-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-3"
        },
        {
          "name": "FEDORA-2016-383fce04e2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
        },
        {
          "name": "openSUSE-SU-2016:1107",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
        },
        {
          "name": "GLSA-201612-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-47"
        },
        {
          "name": "DSA-3548",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3548"
        },
        {
          "name": "USN-2950-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/security/CVE-2016-2113.html"
        },
        {
          "name": "USN-2950-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-2113",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSA:2016-106-02",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
            },
            {
              "name": "SUSE-SU-2016:1022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
            },
            {
              "name": "RHSA-2016:0612",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
            },
            {
              "name": "USN-2950-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-1"
            },
            {
              "name": "SUSE-SU-2016:1028",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
            },
            {
              "name": "http://badlock.org/",
              "refsource": "MISC",
              "url": "http://badlock.org/"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "openSUSE-SU-2016:1064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
            },
            {
              "name": "USN-2950-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-5"
            },
            {
              "name": "https://www.samba.org/samba/history/samba-4.2.10.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
            },
            {
              "name": "FEDORA-2016-be53260726",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
            },
            {
              "name": "RHSA-2016:0618",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
            },
            {
              "name": "SUSE-SU-2016:1024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
            },
            {
              "name": "SUSE-SU-2016:1023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
            },
            {
              "name": "https://www.samba.org/samba/latest_news.html#4.4.2",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
            },
            {
              "name": "1035533",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035533"
            },
            {
              "name": "FEDORA-2016-48b3761baa",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
            },
            {
              "name": "RHSA-2016:0614",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
            },
            {
              "name": "openSUSE-SU-2016:1025",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
            },
            {
              "name": "RHSA-2016:0620",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
            },
            {
              "name": "openSUSE-SU-2016:1106",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa122",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa122"
            },
            {
              "name": "USN-2950-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-3"
            },
            {
              "name": "FEDORA-2016-383fce04e2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
            },
            {
              "name": "openSUSE-SU-2016:1107",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
            },
            {
              "name": "GLSA-201612-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-47"
            },
            {
              "name": "DSA-3548",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3548"
            },
            {
              "name": "USN-2950-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-2"
            },
            {
              "name": "https://www.samba.org/samba/security/CVE-2016-2113.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/security/CVE-2016-2113.html"
            },
            {
              "name": "USN-2950-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-2113",
    "datePublished": "2016-04-25T00:00:00.000Z",
    "dateReserved": "2016-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:17:50.580Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2115 (GCVE-0-2016-2115)

Vulnerability from cvelistv5 – Published: 2016-04-25 00:00 – Updated: 2024-08-05 23:17

Summary

Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

37 references

URL	Tags
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0612.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2950-1	vendor-advisoryx_refsource_UBUNTU
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0613.html	vendor-advisoryx_refsource_REDHAT
http://badlock.org/	x_refsource_MISC
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2950-5	vendor-advisoryx_refsource_UBUNTU
https://www.samba.org/samba/history/samba-4.2.10.html	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0624.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0618.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.samba.org/samba/latest_news.html#4.4.2	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035533	vdb-entryx_refsource_SECTRACK
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0614.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0620.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0611.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bto.bluecoat.com/security-advisory/sa122	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-3	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0619.html	vendor-advisoryx_refsource_REDHAT
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
https://h20566.www2.hpe.com/hpsc/doc/public/displ…	x_refsource_CONFIRM
https://security.gentoo.org/glsa/201612-47	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3548	vendor-advisoryx_refsource_DEBIAN
http://www.ubuntu.com/usn/USN-2950-2	vendor-advisoryx_refsource_UBUNTU
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-4	vendor-advisoryx_refsource_UBUNTU
https://www.samba.org/samba/security/CVE-2016-2115.html	x_refsource_CONFIRM

Date Public

2016-04-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.575Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSA:2016-106-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
          },
          {
            "name": "SUSE-SU-2016:1022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
          },
          {
            "name": "RHSA-2016:0612",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
          },
          {
            "name": "USN-2950-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-1"
          },
          {
            "name": "SUSE-SU-2016:1028",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
          },
          {
            "name": "RHSA-2016:0613",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://badlock.org/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "openSUSE-SU-2016:1064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
          },
          {
            "name": "USN-2950-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
          },
          {
            "name": "FEDORA-2016-be53260726",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
          },
          {
            "name": "RHSA-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
          },
          {
            "name": "RHSA-2016:0618",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
          },
          {
            "name": "SUSE-SU-2016:1024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
          },
          {
            "name": "SUSE-SU-2016:1023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
          },
          {
            "name": "1035533",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035533"
          },
          {
            "name": "FEDORA-2016-48b3761baa",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
          },
          {
            "name": "RHSA-2016:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
          },
          {
            "name": "openSUSE-SU-2016:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
          },
          {
            "name": "RHSA-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
          },
          {
            "name": "RHSA-2016:0611",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
          },
          {
            "name": "openSUSE-SU-2016:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa122"
          },
          {
            "name": "USN-2950-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-3"
          },
          {
            "name": "FEDORA-2016-383fce04e2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
          },
          {
            "name": "openSUSE-SU-2016:1107",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
          },
          {
            "name": "RHSA-2016:0619",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
          },
          {
            "name": "GLSA-201612-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-47"
          },
          {
            "name": "DSA-3548",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3548"
          },
          {
            "name": "USN-2950-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
          },
          {
            "name": "USN-2950-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/security/CVE-2016-2115.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-12-29T21:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SSA:2016-106-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
        },
        {
          "name": "SUSE-SU-2016:1022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
        },
        {
          "name": "RHSA-2016:0612",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
        },
        {
          "name": "USN-2950-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-1"
        },
        {
          "name": "SUSE-SU-2016:1028",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
        },
        {
          "name": "RHSA-2016:0613",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://badlock.org/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "openSUSE-SU-2016:1064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
        },
        {
          "name": "USN-2950-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
        },
        {
          "name": "FEDORA-2016-be53260726",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
        },
        {
          "name": "RHSA-2016:0624",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
        },
        {
          "name": "RHSA-2016:0618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
        },
        {
          "name": "SUSE-SU-2016:1024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
        },
        {
          "name": "SUSE-SU-2016:1023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
        },
        {
          "name": "1035533",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035533"
        },
        {
          "name": "FEDORA-2016-48b3761baa",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
        },
        {
          "name": "RHSA-2016:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
        },
        {
          "name": "openSUSE-SU-2016:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
        },
        {
          "name": "RHSA-2016:0620",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
        },
        {
          "name": "RHSA-2016:0611",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
        },
        {
          "name": "openSUSE-SU-2016:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa122"
        },
        {
          "name": "USN-2950-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-3"
        },
        {
          "name": "FEDORA-2016-383fce04e2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
        },
        {
          "name": "openSUSE-SU-2016:1107",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
        },
        {
          "name": "RHSA-2016:0619",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
        },
        {
          "name": "GLSA-201612-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-47"
        },
        {
          "name": "DSA-3548",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3548"
        },
        {
          "name": "USN-2950-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
        },
        {
          "name": "USN-2950-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/security/CVE-2016-2115.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-2115",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERPC session over ncacn_np, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSA:2016-106-02",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
            },
            {
              "name": "SUSE-SU-2016:1022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
            },
            {
              "name": "RHSA-2016:0612",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
            },
            {
              "name": "USN-2950-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-1"
            },
            {
              "name": "SUSE-SU-2016:1028",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
            },
            {
              "name": "RHSA-2016:0613",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
            },
            {
              "name": "http://badlock.org/",
              "refsource": "MISC",
              "url": "http://badlock.org/"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "openSUSE-SU-2016:1064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
            },
            {
              "name": "USN-2950-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-5"
            },
            {
              "name": "https://www.samba.org/samba/history/samba-4.2.10.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
            },
            {
              "name": "FEDORA-2016-be53260726",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
            },
            {
              "name": "RHSA-2016:0624",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
            },
            {
              "name": "RHSA-2016:0618",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
            },
            {
              "name": "SUSE-SU-2016:1024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
            },
            {
              "name": "SUSE-SU-2016:1023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
            },
            {
              "name": "https://www.samba.org/samba/latest_news.html#4.4.2",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
            },
            {
              "name": "1035533",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035533"
            },
            {
              "name": "FEDORA-2016-48b3761baa",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
            },
            {
              "name": "RHSA-2016:0614",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
            },
            {
              "name": "openSUSE-SU-2016:1025",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
            },
            {
              "name": "RHSA-2016:0620",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
            },
            {
              "name": "RHSA-2016:0611",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
            },
            {
              "name": "openSUSE-SU-2016:1106",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa122",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa122"
            },
            {
              "name": "USN-2950-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-3"
            },
            {
              "name": "FEDORA-2016-383fce04e2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
            },
            {
              "name": "openSUSE-SU-2016:1107",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
            },
            {
              "name": "RHSA-2016:0619",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964"
            },
            {
              "name": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05087821"
            },
            {
              "name": "GLSA-201612-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-47"
            },
            {
              "name": "DSA-3548",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3548"
            },
            {
              "name": "USN-2950-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-2"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
            },
            {
              "name": "USN-2950-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-4"
            },
            {
              "name": "https://www.samba.org/samba/security/CVE-2016-2115.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/security/CVE-2016-2115.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-2115",
    "datePublished": "2016-04-25T00:00:00.000Z",
    "dateReserved": "2016-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:17:50.575Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-2118 (GCVE-0-2016-2118)

Vulnerability from cvelistv5 – Published: 2016-04-12 23:00 – Updated: 2024-08-05 23:17

Summary

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

45 references

URL	Tags
http://www.slackware.com/security/viewer.php?l=sl…	vendor-advisoryx_refsource_SLACKWARE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0612.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2950-1	vendor-advisoryx_refsource_UBUNTU
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0613.html	vendor-advisoryx_refsource_REDHAT
http://badlock.org/	x_refsource_MISC
http://rhn.redhat.com/errata/RHSA-2016-0621.html	vendor-advisoryx_refsource_REDHAT
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://www.ubuntu.com/usn/USN-2950-5	vendor-advisoryx_refsource_UBUNTU
https://www.samba.org/samba/history/samba-4.2.10.html	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://rhn.redhat.com/errata/RHSA-2016-0624.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0618.html	vendor-advisoryx_refsource_REDHAT
http://www.securityfocus.com/bid/86002	vdb-entryx_refsource_BID
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://www.samba.org/samba/security/CVE-2016-2118.html	x_refsource_CONFIRM
https://www.samba.org/samba/latest_news.html#4.4.2	x_refsource_CONFIRM
http://www.securitytracker.com/id/1035533	vdb-entryx_refsource_SECTRACK
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
https://www.kb.cert.org/vuls/id/813296	third-party-advisoryx_refsource_CERT-VN
http://rhn.redhat.com/errata/RHSA-2016-0614.html	vendor-advisoryx_refsource_REDHAT
https://help.ecostruxureit.com/display/public/UAD…	x_refsource_CONFIRM
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0620.html	vendor-advisoryx_refsource_REDHAT
http://rhn.redhat.com/errata/RHSA-2016-0611.html	vendor-advisoryx_refsource_REDHAT
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://bto.bluecoat.com/security-advisory/sa122	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-3	vendor-advisoryx_refsource_UBUNTU
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://rhn.redhat.com/errata/RHSA-2016-0619.html	vendor-advisoryx_refsource_REDHAT
https://security.gentoo.org/glsa/201612-47	vendor-advisoryx_refsource_GENTOO
http://www.debian.org/security/2016/dsa-3548	vendor-advisoryx_refsource_DEBIAN
http://rhn.redhat.com/errata/RHSA-2016-0623.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2950-2	vendor-advisoryx_refsource_UBUNTU
https://access.redhat.com/security/vulnerabilitie…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2016-0625.html	vendor-advisoryx_refsource_REDHAT
https://h20566.www2.hpe.com/portal/site/hpsc/publ…	x_refsource_CONFIRM
https://kb.pulsesecure.net/articles/Pulse_Securit…	x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-2950-4	vendor-advisoryx_refsource_UBUNTU
https://kb.netapp.com/support/s/article/ka51A0000…	x_refsource_CONFIRM

Date Public

2016-04-12 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T23:17:50.706Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SSA:2016-106-02",
            "tags": [
              "vendor-advisory",
              "x_refsource_SLACKWARE",
              "x_transferred"
            ],
            "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
          },
          {
            "name": "SUSE-SU-2016:1022",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
          },
          {
            "name": "RHSA-2016:0612",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
          },
          {
            "name": "USN-2950-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05166182"
          },
          {
            "name": "SUSE-SU-2016:1028",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
          },
          {
            "name": "RHSA-2016:0613",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://badlock.org/"
          },
          {
            "name": "RHSA-2016:0621",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0621.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
          },
          {
            "name": "openSUSE-SU-2016:1064",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
          },
          {
            "name": "USN-2950-5",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-5"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
          },
          {
            "name": "FEDORA-2016-be53260726",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
          },
          {
            "name": "RHSA-2016:0624",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
          },
          {
            "name": "RHSA-2016:0618",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
          },
          {
            "name": "86002",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/86002"
          },
          {
            "name": "SUSE-SU-2016:1024",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
          },
          {
            "name": "SUSE-SU-2016:1023",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/security/CVE-2016-2118.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
          },
          {
            "name": "1035533",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1035533"
          },
          {
            "name": "FEDORA-2016-48b3761baa",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
          },
          {
            "name": "VU#813296",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "https://www.kb.cert.org/vuls/id/813296"
          },
          {
            "name": "RHSA-2016:0614",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
          },
          {
            "name": "openSUSE-SU-2016:1025",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
          },
          {
            "name": "RHSA-2016:0620",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
          },
          {
            "name": "RHSA-2016:0611",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
          },
          {
            "name": "openSUSE-SU-2016:1106",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bto.bluecoat.com/security-advisory/sa122"
          },
          {
            "name": "USN-2950-3",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-3"
          },
          {
            "name": "FEDORA-2016-383fce04e2",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
          },
          {
            "name": "openSUSE-SU-2016:1107",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
          },
          {
            "name": "RHSA-2016:0619",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
          },
          {
            "name": "GLSA-201612-47",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-47"
          },
          {
            "name": "DSA-3548",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3548"
          },
          {
            "name": "RHSA-2016:0623",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0623.html"
          },
          {
            "name": "USN-2950-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/vulnerabilities/badlock"
          },
          {
            "name": "RHSA-2016:0625",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0625.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40196"
          },
          {
            "name": "USN-2950-4",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2950-4"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://kb.netapp.com/support/s/article/ka51A0000008SXzQAM/smb-vulnerabilities-in-multiple-netapp-products"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-04-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka \"BADLOCK.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-11-30T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SSA:2016-106-02",
          "tags": [
            "vendor-advisory",
            "x_refsource_SLACKWARE"
          ],
          "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
        },
        {
          "name": "SUSE-SU-2016:1022",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
        },
        {
          "name": "RHSA-2016:0612",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
        },
        {
          "name": "USN-2950-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05166182"
        },
        {
          "name": "SUSE-SU-2016:1028",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
        },
        {
          "name": "RHSA-2016:0613",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://badlock.org/"
        },
        {
          "name": "RHSA-2016:0621",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0621.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
        },
        {
          "name": "openSUSE-SU-2016:1064",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
        },
        {
          "name": "USN-2950-5",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-5"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
        },
        {
          "name": "FEDORA-2016-be53260726",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
        },
        {
          "name": "RHSA-2016:0624",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
        },
        {
          "name": "RHSA-2016:0618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
        },
        {
          "name": "86002",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/86002"
        },
        {
          "name": "SUSE-SU-2016:1024",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
        },
        {
          "name": "SUSE-SU-2016:1023",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/security/CVE-2016-2118.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
        },
        {
          "name": "1035533",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1035533"
        },
        {
          "name": "FEDORA-2016-48b3761baa",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
        },
        {
          "name": "VU#813296",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "https://www.kb.cert.org/vuls/id/813296"
        },
        {
          "name": "RHSA-2016:0614",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
        },
        {
          "name": "openSUSE-SU-2016:1025",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
        },
        {
          "name": "RHSA-2016:0620",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
        },
        {
          "name": "RHSA-2016:0611",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
        },
        {
          "name": "openSUSE-SU-2016:1106",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bto.bluecoat.com/security-advisory/sa122"
        },
        {
          "name": "USN-2950-3",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-3"
        },
        {
          "name": "FEDORA-2016-383fce04e2",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
        },
        {
          "name": "openSUSE-SU-2016:1107",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
        },
        {
          "name": "RHSA-2016:0619",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
        },
        {
          "name": "GLSA-201612-47",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-47"
        },
        {
          "name": "DSA-3548",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3548"
        },
        {
          "name": "RHSA-2016:0623",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0623.html"
        },
        {
          "name": "USN-2950-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://access.redhat.com/security/vulnerabilities/badlock"
        },
        {
          "name": "RHSA-2016:0625",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2016-0625.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40196"
        },
        {
          "name": "USN-2950-4",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2950-4"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://kb.netapp.com/support/s/article/ka51A0000008SXzQAM/smb-vulnerabilities-in-multiple-netapp-products"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2016-2118",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka \"BADLOCK.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "SSA:2016-106-02",
              "refsource": "SLACKWARE",
              "url": "http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2016\u0026m=slackware-security.458012"
            },
            {
              "name": "SUSE-SU-2016:1022",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.html"
            },
            {
              "name": "RHSA-2016:0612",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0612.html"
            },
            {
              "name": "USN-2950-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-1"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05166182",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05166182"
            },
            {
              "name": "SUSE-SU-2016:1028",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.html"
            },
            {
              "name": "RHSA-2016:0613",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0613.html"
            },
            {
              "name": "http://badlock.org/",
              "refsource": "MISC",
              "url": "http://badlock.org/"
            },
            {
              "name": "RHSA-2016:0621",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0621.html"
            },
            {
              "name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html"
            },
            {
              "name": "openSUSE-SU-2016:1064",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.html"
            },
            {
              "name": "USN-2950-5",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-5"
            },
            {
              "name": "https://www.samba.org/samba/history/samba-4.2.10.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/history/samba-4.2.10.html"
            },
            {
              "name": "FEDORA-2016-be53260726",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.html"
            },
            {
              "name": "RHSA-2016:0624",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0624.html"
            },
            {
              "name": "RHSA-2016:0618",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0618.html"
            },
            {
              "name": "86002",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/86002"
            },
            {
              "name": "SUSE-SU-2016:1024",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.html"
            },
            {
              "name": "SUSE-SU-2016:1023",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.html"
            },
            {
              "name": "https://www.samba.org/samba/security/CVE-2016-2118.html",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/security/CVE-2016-2118.html"
            },
            {
              "name": "https://www.samba.org/samba/latest_news.html#4.4.2",
              "refsource": "CONFIRM",
              "url": "https://www.samba.org/samba/latest_news.html#4.4.2"
            },
            {
              "name": "1035533",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1035533"
            },
            {
              "name": "FEDORA-2016-48b3761baa",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.html"
            },
            {
              "name": "VU#813296",
              "refsource": "CERT-VN",
              "url": "https://www.kb.cert.org/vuls/id/813296"
            },
            {
              "name": "RHSA-2016:0614",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0614.html"
            },
            {
              "name": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
              "refsource": "CONFIRM",
              "url": "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes"
            },
            {
              "name": "openSUSE-SU-2016:1025",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.html"
            },
            {
              "name": "RHSA-2016:0620",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0620.html"
            },
            {
              "name": "RHSA-2016:0611",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0611.html"
            },
            {
              "name": "openSUSE-SU-2016:1106",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.html"
            },
            {
              "name": "https://bto.bluecoat.com/security-advisory/sa122",
              "refsource": "CONFIRM",
              "url": "https://bto.bluecoat.com/security-advisory/sa122"
            },
            {
              "name": "USN-2950-3",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-3"
            },
            {
              "name": "FEDORA-2016-383fce04e2",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.html"
            },
            {
              "name": "openSUSE-SU-2016:1107",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.html"
            },
            {
              "name": "RHSA-2016:0619",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0619.html"
            },
            {
              "name": "GLSA-201612-47",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-47"
            },
            {
              "name": "DSA-3548",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3548"
            },
            {
              "name": "RHSA-2016:0623",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0623.html"
            },
            {
              "name": "USN-2950-2",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-2"
            },
            {
              "name": "https://access.redhat.com/security/vulnerabilities/badlock",
              "refsource": "CONFIRM",
              "url": "https://access.redhat.com/security/vulnerabilities/badlock"
            },
            {
              "name": "RHSA-2016:0625",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2016-0625.html"
            },
            {
              "name": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399",
              "refsource": "CONFIRM",
              "url": "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399"
            },
            {
              "name": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40196",
              "refsource": "CONFIRM",
              "url": "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40196"
            },
            {
              "name": "USN-2950-4",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-2950-4"
            },
            {
              "name": "https://kb.netapp.com/support/s/article/ka51A0000008SXzQAM/smb-vulnerabilities-in-multiple-netapp-products",
              "refsource": "CONFIRM",
              "url": "https://kb.netapp.com/support/s/article/ka51A0000008SXzQAM/smb-vulnerabilities-in-multiple-netapp-products"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-2118",
    "datePublished": "2016-04-12T23:00:00.000Z",
    "dateReserved": "2016-01-29T00:00:00.000Z",
    "dateUpdated": "2024-08-05T23:17:50.706Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2016:1022-1

CVE-2015-5370 (GCVE-0-2015-5370)

CVE-2016-2110 (GCVE-0-2016-2110)

CVE-2016-2111 (GCVE-0-2016-2111)

CVE-2016-2112 (GCVE-0-2016-2112)

CVE-2016-2113 (GCVE-0-2016-2113)

CVE-2016-2115 (GCVE-0-2016-2115)

CVE-2016-2118 (GCVE-0-2016-2118)

Tags

Sightings

Nomenclature

Related by attack behaviour