7.4

CVE-2016-2113

Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SambaSamba Version4.0.0
SambaSamba Version4.0.1
SambaSamba Version4.0.2
SambaSamba Version4.0.3
SambaSamba Version4.0.4
SambaSamba Version4.0.5
SambaSamba Version4.0.6
SambaSamba Version4.0.7
SambaSamba Version4.0.8
SambaSamba Version4.0.9
SambaSamba Version4.0.10
SambaSamba Version4.0.11
SambaSamba Version4.0.12
SambaSamba Version4.0.13
SambaSamba Version4.0.14
SambaSamba Version4.0.15
SambaSamba Version4.0.16
SambaSamba Version4.0.17
SambaSamba Version4.0.18
SambaSamba Version4.0.19
SambaSamba Version4.0.20
SambaSamba Version4.0.21
SambaSamba Version4.0.22
SambaSamba Version4.0.23
SambaSamba Version4.0.24
SambaSamba Version4.0.25
SambaSamba Version4.0.26
SambaSamba Version4.1.0
SambaSamba Version4.1.1
SambaSamba Version4.1.2
SambaSamba Version4.1.3
SambaSamba Version4.1.4
SambaSamba Version4.1.5
SambaSamba Version4.1.6
SambaSamba Version4.1.7
SambaSamba Version4.1.8
SambaSamba Version4.1.9
SambaSamba Version4.1.10
SambaSamba Version4.1.11
SambaSamba Version4.1.12
SambaSamba Version4.1.13
SambaSamba Version4.1.14
SambaSamba Version4.1.15
SambaSamba Version4.1.16
SambaSamba Version4.1.17
SambaSamba Version4.1.18
SambaSamba Version4.1.19
SambaSamba Version4.1.20
SambaSamba Version4.1.21
SambaSamba Version4.1.22
SambaSamba Version4.1.23
SambaSamba Version4.2.0 Updaterc1
SambaSamba Version4.2.0 Updaterc2
SambaSamba Version4.2.0 Updaterc3
SambaSamba Version4.2.0 Updaterc4
SambaSamba Version4.2.1
SambaSamba Version4.2.2
SambaSamba Version4.2.3
SambaSamba Version4.2.4
SambaSamba Version4.2.5
SambaSamba Version4.2.6
SambaSamba Version4.2.7
SambaSamba Version4.2.8
SambaSamba Version4.2.9
SambaSamba Version4.3.0
SambaSamba Version4.3.1
SambaSamba Version4.3.2
SambaSamba Version4.3.3
SambaSamba Version4.3.4
SambaSamba Version4.3.5
SambaSamba Version4.3.6
SambaSamba Version4.4.0
CanonicalUbuntu Linux Version14.04 SwEditionlts
CanonicalUbuntu Linux Version15.10
CanonicalUbuntu Linux Version16.04 SwEditionlts
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.39% 0.844
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.4 2.2 5.2
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N