5.9

CVE-2016-2124

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Samba Version >= 3.0.0 < 4.13.14
Samba ≫ Samba Version >= 4.14.0 < 4.14.10
Samba ≫ Samba Version >= 4.15.0 < 4.15.2
Debian ≫ Debian Linux Version9.0
Debian ≫ Debian Linux Version10.0
Fedoraproject ≫ Fedora Version33
Fedoraproject ≫ Fedora Version34
Fedoraproject ≫ Fedora Version35
Redhat ≫ Gluster Storage Version3.0
Redhat ≫ Gluster Storage Version3.5
Redhat ≫ Openstack Version13
Redhat ≫ Openstack Version16.1
Redhat ≫ Openstack Version16.2
Redhat ≫ Virtualization Host Version4.0
Redhat ≫ Enterprise Linux Version7.0
Redhat ≫ Enterprise Linux Version8.0
Redhat ≫ Enterprise Linux Eus Version8.2
Redhat ≫ Enterprise Linux Eus Version8.4
Redhat ≫ Enterprise Linux Tus Version8.2
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version20.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version21.04
Canonical ≫ Ubuntu Linux Version21.10
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.79% 0.732
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://bugzilla.redhat.com/show_bug.cgi?id=2019660
Patch
Third Party Advisory
Issue Tracking