CVE-2016-2112

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-2112

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2112.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-2112

Related

Published

2016-04-25T00:59:03Z

Modified

2024-09-18T06:38:14.017771Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.

References

Affected packages

Debian:11 / samba

Package

Name: samba
Purl: pkg:deb/debian/samba?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.7+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / samba

Package

Name: samba
Purl: pkg:deb/debian/samba?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.7+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / samba

Package

Name: samba
Purl: pkg:deb/debian/samba?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.7+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/samba-team/samba

Affected ranges

Type: GIT
Repo: https://github.com/samba-team/samba
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

007f9c90e952aeea2d8f73cff3ccd0f747a9c06e

Last affected

0356de9521fbd72ecf0f1707563b44227a182eed

Last affected

052b65e15293b62520f3a35d4681ffeaf7499cae

Last affected

0730f4e464b249ffe2319e98902ed96089f3230b

Last affected

074ad65a4b429c7671043e062bec4d9f53df53bf

Last affected

099d375891d4444320bd451486e8bf7d9afdbe0f

Last affected

0a7b6930a1bcc9b4eebc8dc4423508a1bc61b425

Last affected

0abd2c034d1c3f437d5c656a06fe50fbd8428ce3

Last affected

0b9d59d256a74594e89467e5ebe4e62c25c9572e

Last affected

0c1297017c1ac3b1af5a22003398ba6f0ef600e8

Last affected

0c723760b4a8975bcd11e645ff76f6834559ae71

Last affected

0d6560c568027ffd9899bc2dcada3ae69ec7d1a2

Last affected

0f475ed1a387e37d477fd434c06ad5783c58adea

Last affected

10c9d36fc7c16e5c28e08bcec354effcd0e66d0c

Last affected

11319b5f1d0c48cefea695f89aa64f72abe1dd3e

Last affected

115e67c2701826f67be858c8c922d125a775d707

Last affected

12598a76c0330ea1067c4b11b295ab3473e93f15

Last affected

144791ecd8a604877ba8236849036bc07fce8d0c

Last affected

154a270edb95d5141781bc5e76b4b2dcac1be5e2

Last affected

160f2a3ea700c763b2e0d7753f393e677c5b8f54

Last affected

17111c4885f9c382510c6cbd8650f0bd5406fcb6

Last affected

17bf0c23c23bc6ef5b6623c71071dd26d5fc6354

Last affected

1a121d18eb9b3db7b2f9c0a8c4a303fca1800fcd

Last affected

1a878c865637feb80206c0dc599acebf7f4a46bd

Last affected

1aef3fb9c8f1b5b5bb6a53ed6c4d33ec59d3360a

Last affected

1b9151271f45a3d95e4aefbe11eb5f737f7c542f

Last affected

1c2abd4cffe63bdc95449d97c9e823e96de04a8e

Last affected

1c9494c76cc9686c61e0966f38528d3318f3176f

Last affected

1d58e0d7811acc335f09128ae757f5f76a51644d

Last affected

1e682c3ce0593b3cd93acc6a5be0d74db8d04fef

Last affected

1e8a881beb38f9a9ab755cc2e0632b3053940661

Last affected

1eb23ebaa1c9762d1a23810fcead1b1f50923e36

Last affected

20cbf46fd8cb1a9a32d73d1c4071b6eb74c7ff84

Last affected

21764ef2249447cf480044486d6537ffbca6063d

Last affected

21b5ec4531034be32dcc79055c85bd40a5a3efd6

Last affected

247949c1706d3a5723fb54363d0670dda277afcb

Last affected

28eacea7dd2ba3e7f2b938e25118dbc93b6c7f8d

Last affected

2aa648e4e9c530a4c9e8d1389fa16e775ac91e54

Last affected

2b2ec186aa3fc6214c557b6770b68fd330852240

Last affected

2ec2bd60863a80367be9c8b11e080ac718056796

Last affected

2fbc5382ef48755b09c60e9dfa66fd1b2e880c18

Last affected

301177714b731e06257b852ced458f031e07359b

Last affected

30812c414bb0ceb95abae08c35b94b2f97be4c5c

Last affected

3211982d13637fe3389ab4e6901c9f593555045e

Last affected

32d78c867eb259960736121146c7152934f3e6b3

Last affected

35c3f5e5dd1b3858db71a1f93d0590f818aff14a

Last affected

3be3266359da9ee6cd3aac970a81f019e8c389eb

Last affected

3df467f2f38809d0b41c76463bd73c36e1853238

Last affected

3ec5aea9e2b9c1aae05c571f9d826816590dd9ae

Last affected

40001e9770453a219a5f5bf888cd3a205514d93b

Last affected

40787695a1a3200421c9409eef9e520b849ee3a1

Last affected

413fb83dfd7dbf76ea231bf4e0bc5c38686d5b23

Last affected

42e655f1c9fd4c5b22a5b9d3a228e0a90432952f

Last affected

430c74f5b58e7054ded963bd3dc8cc4b5f7b1cd2

Last affected

4395552a555ebc1993452143c5f65ed9d9d6b4b0

Last affected

439b006e73b330dd84e4b65e25142063a9be25f9

Last affected

47311ed9f3ed39c02ffbdf7b958135065ab7f0c2

Last affected

47b01c2f1867f5107fa0b80eba69241a837861da

Last affected

4800b9f543c15e160a3c5e9ce46c16cba6c7c895

Last affected

48966b660733c9c9726cc3a87fa670b4c8427f5a

Last affected

492c673de07d68e0e937ca584302fef577318b24

Last affected

496c17067753943f3ffe26242ac0abc24ffeb1dc

Last affected

49fc62cc5d8bcb2ef246fa6505c99071b406c413

Last affected

4a478f189aa658a80daf8a6dfa2c99a41b5476d6

Last affected

4ae5d4171c16ba0c0197fc62087a19ccba9ffe9e

Last affected

4ae81a924339aa4fb743b163b3edb4ec8f8c5485

Last affected

51b334e2d9739abc748490f6085ed8b8e5e1f4b4

Last affected

52eee62076402ebb00b9f3df170df1c79a27efb8

Last affected

54e3135523d8c592b76d3929c5fd127c62f7f969

Last affected

55045f52181e5448c2aeefabde047128158d7c2e

Last affected

55abe9f10abc97ad16e6c0c2fcf5303f5a700abd

Last affected

55c51b864a32d7b66240b4a9fb9162906861b1d7

Last affected

55c6deff1e06d59e4de84258c5686553133a785c

Last affected

566295fa13ff4a848fea517d41bc08aee87966ac

Last affected

57930cf3e4eb79b26cd062b51635d1df2d68a0ed

Last affected

58dd8c8a56a628f51c1c329b3381192834e9eadf

Last affected

5915ec88a2b704d0970902d9716570037bf0a3e2

Last affected

5bdabda9e2143b1188f52533a4fa3f838b6066c9

Last affected

5c83e5f9d5f672817e64c7c8c0865d3a3e2eaf14

Last affected

5d48aa5a72141c739883dd72d43b22b690c8eb74

Last affected

5e3a3012f3083c40e70f89c1d96ffa6be91aa72a

Last affected

5e47111901a3fcaf18cb03e4bc6e77a395807343

Last affected

5f1f1c47623f846909481073d56bc909d13e5e37

Last affected

63976815d2ce915d2093fa9136912deeb704ece2

Last affected

656624f2d643567451f8c7f1f9bb91a6262148fa

Last affected

65e71c35f782cb1c8a22c61e88f1f853b585b297

Last affected

67d6b147834889b4ee4feac56731a7b2af63a613

Last affected

6898c4dbf993889a804e77dd6cb32e0be50f653f

Last affected

69880dac28ac1681bb0c3d84280494de3d788cc6

Last affected

6ac41410868711200442413dad6461771cda977b

Last affected

6c37399e65e6b13fead8f262cdb72fd9f2ffdfda

Last affected

6cc1d3030667d2c57cceac870c0d8480cce45905

Last affected

6de5de4f5c23ff79074b68d7a7447d35af8e200d

Last affected

6de842a36dc62db3587a49871cd59d87d54565c6

Last affected

71e1aa5279977453f08cd59158eb797fcdf51de0

Last affected

71e7cdcce26c1ed7504760a94cf51e79b2ec570c

Last affected

72b4c8d3127f232434d985543e6f9d812cc9adea

Last affected

7439cd5efa50058741c57857109690e4a104f9f0

Last affected

74be972b0e04f0cd78ee4df46f167060fc9cc249

Last affected

794f35080f5881f01cba7e9232e5620bf431f8a9

Last affected

7d36ff6e592292d3feaf532a2cbb5480b9faa94c

Last affected

7fe4b24fcebe231843149fd8f7dbe5676812367d

Last affected

851ea182cfa6521a8385d51a98f8ecdca539c831

Last affected

857b6fb063b9968134cc664430ff5d33a992da4a

Last affected

89cb2474a635ba3fc68eb2816f9fca62b329dd1f

Last affected

8a4288508e9de344b6ac37f8c2bc63f7c050991e

Last affected

8a9c863ba0acb9ece202e68eca269b5f6ad4570e

Last affected

8aa259d232aca22afab9c0bf8b95fcededf53b05

Last affected

8cd146c8be065464c0fb702abe5295c6a51c55ca

Last affected

8d88de0c5fa4836c163e4588b5a58d8ff607e05f

Last affected

8d91e07ef22ad3ed484b04bc4968380a24940696

Last affected

9123504f2b6f9af458510721416cb25993959a31

Last affected

91d94a9f466d48fb5f8522962c9ed7c793865f52

Last affected

91f4275873ebeda8f57684f09df67162ae80515a

Last affected

9398128966537cc1977ea59ef54fbfd66bf8d0e5

Last affected

943c0aaaeb5a24a9501a164e9a765384e8e8a2ff

Last affected

951e58303646fc0eb3360b0865631b6c96b6959f

Last affected

98b4a3491bedad8ea96faa057459fb1dcabfab9c

Last affected

99858ddb5237a525ecd5240a2f5ae878ae315769

Last affected

99c832a24d6d0c80d8f76f38b0062b62a0730706

Last affected

9da023a3bcca8e984a461dc7a89bd3a470196c12

Last affected

9f73c1990a19daa899fa5345530a867e69a5be94

Last affected

9fae819cd93e56d68facc51586c5fb3bd228a5bc

Last affected

a3d27deaa6c20d5764a511384d75ee481c92e13d

Last affected

a5d2b6a0228634dda3e495e0cf86db551b11e4d7

Last affected

a5e9217d5ca9eb7697e5fa855572bb49f0e644ac

Last affected

a6fb418be7adccdd583a3b489b58023cfdd392ef

Last affected

a7aab3330f8bac43c86fdf3770daa0c42828a29c

Last affected

a8e0112c7c540307e263d00306cb06f473547cea

Last affected

aa97504f0358dcc23de7a65f39a1c4d24f0709b7

Last affected

ac2d88014dd7d2c09480972ab4e950cfec62b6cc

Last affected

ad4be8a01adacd96c5f0fe1bb87a170ab88d2b88

Last affected

adc7b060e42b6183d45b5206c23e4e1828f548eb

Last affected

add4fe9079dda8fb0bfd9763da85d65ed0063523

Last affected

b02db8daa41933f628903c316f7a1e283443d08e

Last affected

b0574ae788d3379915996fb5bd0db2721f0634cd

Last affected

b09440c77b93ff6088c2fd474d6b24c081054812

Last affected

b0cd2e547f4db250e10db852fd3e902404b9601e

Last affected

b1061ab00f59fdf4ebab622ab7a9c29a3aa51eee

Last affected

b1d9ddf738c6e59e489bc9c339ce6de5988b689e

Last affected

b3413711e12c1357cb63cdbdaa250786f9119032

Last affected

b666d0a4b597218f5f5020bf36d80d84dcbf7259

Last affected

b6d7caea3867a50333b5326883213f6ce58f5194

Last affected

b7676d1465ed6acb3fa339f6b4efc63d07410f69

Last affected

b7fc60b599845f29dd1fe44e50420f6044ba7d5e

Last affected

b85f6018c803fb9aad82820d4b5505179ec5bac3

Last affected

ba3837e1ce6024e8cc5153e803d32a6ed750408b

Last affected

ba749600e9f29910632b67f93fc348e287e673f4

Last affected

baf4349dd5769b9bca4ac08f869f7b0fbb01a4ed

Last affected

bb9f768419b656508ba1d62e8c84be7b6037a11f

Last affected

bc0f537280d7b34c717629312015170344289e5c

Last affected

bcb98214b77e9ccefcf2716644f72d339bb3d132

Last affected

bdfd2220392769de631a600ed78e9f64fad4d9cd

Last affected

bfe7b2cbeda80570320f357337918b5d66ff8b77

Last affected

c0aa42785d6b942b58a167da80f5e64385beff02

Last affected

c0bc3a3735aa9b5a44006e9dce2fb5e934b5e714

Last affected

c161aba8942c82baf5d5a84a5d3b25163000f69d

Last affected

c2633a95a88f5f777fc94a25a07f1faa47420fc5

Last affected

c4f50dadc4a3baccd23e5c126448c3bccd05dc68

Last affected

c541b9eac581c74fe694f061dc27a9aa0cd4ca43

Last affected

c7a93d73a64be116d52aea0972e9a47c3234c73c

Last affected

c88a4f4923fef8243e7e9dea4ab57f620f3a387a

Last affected

c9f30951604ea5e5a25b404de1fb54158cae2b80

Last affected

cd2f9fe16e8ee8f0bd15ba4dea6c7d043ede5e07

Last affected

cd6c0af7aad6f92f2415f9e11c23f1b36ab077e9

Last affected

cd89c8372cbc5868f23094a9b7481be21a89a7e9

Last affected

cdb6f49d577fa5b24d294a50780604c89912c012

Last affected

ce76b268af425b102ea27e2e09e0104608a6ccc4

Last affected

d053eed91cb8a6d33bc6b79caec3c839209cf407

Last affected

d07d8701d9a49609d0291b599816a0670d29a9f3

Last affected

d0e7cc3b38de85ce33af1b9f056fd16f6b65c934

Last affected

d277da2671f3be4e74be34d6b91b29e7ed01c195

Last affected

d2e900757d8e8e2a82cb14e79814ed3cbc8d93c1

Last affected

d4f5b5255f9b95050ddd9d67bd3958402be77918

Last affected

d7b06955393e92255f807db0ef4786e9037d31ec

Last affected

d82b72a5a5d7c1585a39f3a9530ff8861bfda45a

Last affected

d89ba32c49049ae105b02b2cea578605a13a7afb

Last affected

db4f7867aacf386c7c76ddcefd86e5d1e800ddbe

Last affected

dbf87d3867c1771a09029b733c8de1e134e270e4

Last affected

df2e84cf4c3ebe3712af966384cff29d897f3616

Last affected

df33344d8eb40221d60c99931690703a11d91bc2

Last affected

dff54f716bdd76e3d167dc96bba6e168ef58cadd

Last affected

e005eb7968bf7fb4bd2a09ca2335bddb78a4b4e6

Last affected

e03ad1401fd1cca54f9f5c4c1e98ec9ad87b5565

Last affected

e05a4321d4c550542d16843595cd75c1ce37fdca

Last affected

e0c2e3cd1579d89b2e3f8d1bce2019e61104441e

Last affected

e1a17c8cbc0a619d0f0a34e65559bb6a2081dd97

Last affected

e1e735a1ac169a52127e2a2b36444f4b15f89b15

Last affected

e2250ba709a400e1d9a263ee6e885637f8369ca5

Last affected

e2dff319a6d5c0c54acdba3d4fec05477ca60f11

Last affected

e3573261c079bf4e0d4642d4520a5e6eaea41b13

Last affected

e795800392ce1b5b5717ea0ad5334ebd6c9df7ed

Last affected

e8be79de16329360b15827d3cbf65c09772a3788

Last affected

eb18d5d2492632fcccd71a5c3fc0364465def609

Last affected

ed09ee74fcd4929c3ca11ce821b70e1d3ee0d5d8

Last affected

f05f5dce39b11e937fb19270b7bcc888582edf35

Last affected

f139544a362c7601ee703d04977909c4686ee88c

Last affected

f14dcca985e4e76586a19d9d1f4ac6a7dafd4f91

Last affected

f312bf9ec12edaddb7693e5759ef71c1b904b2fb

Last affected

f39371e3acc476397898a30f3bf3dac9d34fbb53

Last affected

f571f362deaa5bfbdb22c3a7d8409bab9b6c8d82

Last affected

f6b6d3bf9d43d45560d352b76c12fe0c87a16fa3

Last affected

f6eda18efebe9fc559aeb63d06505b5505cd9b41

Last affected

f6fd10202cc6d67e0c1324c858cea23372a6cacd

Last affected

f7c3d2984be6aaae711ff144e929b5e5dc98a03e

Last affected

fb5b75d26b882c48ac073b6425dfce15873c243e

Last affected

fbfd370cedcc3f29accc6c6999a682ed27e29ce3

Last affected

fcb091407ba003db807964f27a2b7cecc70896c7

Last affected

fcc634b483255bedf53f3aea40334c018e13dcce

Last affected

fd69161868b5aa4d644488cc4e8069ba40266576

Affected versions

ldb-1.*

ldb-1.1.0

ldb-1.1.10

ldb-1.1.11

ldb-1.1.12

ldb-1.1.13

ldb-1.1.14

ldb-1.1.15

ldb-1.1.16

ldb-1.1.17

ldb-1.1.18

ldb-1.1.19

ldb-1.1.2

ldb-1.1.20

ldb-1.1.21

ldb-1.1.3

ldb-1.1.4

ldb-1.1.5

ldb-1.1.6

ldb-1.1.8

ldb-1.1.9

samba-3.*

samba-3.0.27a

samba-3.0.28

samba-3.0.28a

samba-3.0.29

samba-3.0.31

samba-3.0.32

samba-3.0.33

samba-3.2.0

samba-3.2.0pre2

samba-3.2.0pre3

samba-3.2.0rc1

samba-3.2.0rc2

samba-3.2.1

samba-3.2.2

samba-3.2.3

samba-3.2.4

samba-3.2.5

samba-3.2.6

samba-3.2.7

samba-3.3.0

samba-3.3.0pre1

samba-3.3.0pre2

samba-3.3.0rc1

samba-3.3.0rc2

samba-3.3.1

samba-3.3.10

samba-3.3.11

samba-3.3.12

samba-3.3.2

samba-3.3.3

samba-3.3.4

samba-3.3.5

samba-3.3.6

samba-3.3.7

samba-3.3.8

samba-3.3.9

samba-3.4.0

samba-3.4.0pre1

samba-3.4.0pre2

samba-3.4.0rc1

samba-3.4.1

samba-3.4.10

samba-3.4.2

samba-3.4.3

samba-3.4.4

samba-3.4.5

samba-3.4.6

samba-3.4.7

samba-3.4.8

samba-3.4.9

samba-3.5.0

samba-3.5.0pre1

samba-3.5.0pre2

samba-3.5.0rc1

samba-3.5.0rc2

samba-3.5.0rc3

samba-3.5.1

samba-3.5.10

samba-3.5.11

samba-3.5.12

samba-3.5.13

samba-3.5.14

samba-3.5.15

samba-3.5.16

samba-3.5.17

samba-3.5.18

samba-3.5.2

samba-3.5.3

samba-3.5.4

samba-3.5.5

samba-3.5.6

samba-3.5.7

samba-3.5.8

samba-3.5.9

samba-3.6.0

samba-3.6.0pre1

samba-3.6.0pre2

samba-3.6.0pre3

samba-3.6.0rc1

samba-3.6.0rc2

samba-3.6.0rc3

samba-3.6.1

samba-3.6.10

samba-3.6.11

samba-3.6.2

samba-3.6.3

samba-3.6.4

samba-3.6.5

samba-3.6.6

samba-3.6.7

samba-3.6.8

samba-3.6.9

samba-4.*

samba-4.0.0

samba-4.0.0alpha10

samba-4.0.0alpha11

samba-4.0.0alpha13

samba-4.0.0alpha14

samba-4.0.0alpha15

samba-4.0.0alpha16

samba-4.0.0alpha17

samba-4.0.0alpha18

samba-4.0.0alpha19

samba-4.0.0alpha20

samba-4.0.0alpha21

samba-4.0.0alpha6

samba-4.0.0alpha7

samba-4.0.0alpha8

samba-4.0.0alpha9

samba-4.0.0beta1

samba-4.0.0beta2

samba-4.0.0beta3

samba-4.0.0beta4

samba-4.0.0beta5

samba-4.0.0beta6

samba-4.0.0beta7

samba-4.0.0beta8

samba-4.0.0rc1

samba-4.0.0rc2

samba-4.0.0rc3

samba-4.0.0rc4

samba-4.0.0rc5

samba-4.0.0rc6

samba-4.0.1

samba-4.0.2

samba-4.0.3

samba-4.1.0

samba-4.1.0rc1

samba-4.1.0rc2

samba-4.1.0rc3

samba-4.1.0rc4

samba-4.1.1

samba-4.1.2

samba-4.1.3

samba-4.1.4

samba-4.1.5

samba-4.2.0

samba-4.2.0rc1

samba-4.2.0rc2

samba-4.2.0rc3

samba-4.2.0rc4

samba-4.2.0rc5

samba-4.2.1

samba-4.2.2

samba-4.2.3

samba-4.2.4

samba-4.2.5

samba-4.2.6

samba-4.3.0

samba-4.3.0rc1

samba-4.3.0rc2

samba-4.3.0rc3

samba-4.3.0rc4

samba-4.3.1

samba-4.3.2

samba-4.3.3

samba-4.3.4

Other

samba-misc-tags/initial-v3-0-test

samba-misc-tags/initial-v3-0-unstable

samba-misc-tags/initial-v3-2-test

samba-misc-tags/initial-v3-2-unstable

talloc-1.*

talloc-1.3.0

talloc-1.3.1

talloc-2.*

talloc-2.0.0

talloc-2.0.1

talloc-2.0.7

talloc-2.0.8

talloc-2.1.0

talloc-2.1.1

talloc-2.1.2

talloc-2.1.3

tdb-1.*

tdb-1.1.3

tdb-1.1.5

tdb-1.2.0

tdb-1.2.1

tdb-1.2.10

tdb-1.2.11

tdb-1.2.12

tdb-1.2.13

tdb-1.3.0

tdb-1.3.1

tdb-1.3.2

tdb-1.3.3

tdb-1.3.4

tdb-1.3.5

tdb-1.3.6

tdb-1.3.7

tevent-0.*

tevent-0.9.11

tevent-0.9.12

tevent-0.9.13

tevent-0.9.14

tevent-0.9.15

tevent-0.9.16

tevent-0.9.17

tevent-0.9.18

tevent-0.9.19

tevent-0.9.20

tevent-0.9.21

tevent-0.9.22

tevent-0.9.23

tevent-0.9.24

tevent-0.9.25

tevent-0.9.8