CVE-2016-2114

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2016-2114

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2114.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2016-2114

Related

Published

2016-04-25T00:59:05Z

Modified

2024-09-18T02:48:49.277671Z

Severity

5.9 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.

References

Affected packages

Debian:11 / samba

Package

Name: samba
Purl: pkg:deb/debian/samba?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.7+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / samba

Package

Name: samba
Purl: pkg:deb/debian/samba?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.7+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / samba

Package

Name: samba
Purl: pkg:deb/debian/samba?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.7+dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/samba-team/samba

Affected ranges

Type: GIT
Repo: https://github.com/samba-team/samba
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

0a7b6930a1bcc9b4eebc8dc4423508a1bc61b425

Last affected

0c1297017c1ac3b1af5a22003398ba6f0ef600e8

Last affected

11319b5f1d0c48cefea695f89aa64f72abe1dd3e

Last affected

144791ecd8a604877ba8236849036bc07fce8d0c

Last affected

154a270edb95d5141781bc5e76b4b2dcac1be5e2

Last affected

1a121d18eb9b3db7b2f9c0a8c4a303fca1800fcd

Last affected

1c2abd4cffe63bdc95449d97c9e823e96de04a8e

Last affected

1e682c3ce0593b3cd93acc6a5be0d74db8d04fef

Last affected

1eb23ebaa1c9762d1a23810fcead1b1f50923e36

Last affected

21764ef2249447cf480044486d6537ffbca6063d

Last affected

28eacea7dd2ba3e7f2b938e25118dbc93b6c7f8d

Last affected

2b2ec186aa3fc6214c557b6770b68fd330852240

Last affected

2ec2bd60863a80367be9c8b11e080ac718056796

Last affected

301177714b731e06257b852ced458f031e07359b

Last affected

30812c414bb0ceb95abae08c35b94b2f97be4c5c

Last affected

3211982d13637fe3389ab4e6901c9f593555045e

Last affected

32d78c867eb259960736121146c7152934f3e6b3

Last affected

3be3266359da9ee6cd3aac970a81f019e8c389eb

Last affected

40001e9770453a219a5f5bf888cd3a205514d93b

Last affected

413fb83dfd7dbf76ea231bf4e0bc5c38686d5b23

Last affected

42e655f1c9fd4c5b22a5b9d3a228e0a90432952f

Last affected

430c74f5b58e7054ded963bd3dc8cc4b5f7b1cd2

Last affected

4395552a555ebc1993452143c5f65ed9d9d6b4b0

Last affected

4800b9f543c15e160a3c5e9ce46c16cba6c7c895

Last affected

48966b660733c9c9726cc3a87fa670b4c8427f5a

Last affected

492c673de07d68e0e937ca584302fef577318b24

Last affected

52eee62076402ebb00b9f3df170df1c79a27efb8

Last affected

55c51b864a32d7b66240b4a9fb9162906861b1d7

Last affected

55c6deff1e06d59e4de84258c5686553133a785c

Last affected

58dd8c8a56a628f51c1c329b3381192834e9eadf

Last affected

5e3a3012f3083c40e70f89c1d96ffa6be91aa72a

Last affected

63976815d2ce915d2093fa9136912deeb704ece2

Last affected

6898c4dbf993889a804e77dd6cb32e0be50f653f

Last affected

6c37399e65e6b13fead8f262cdb72fd9f2ffdfda

Last affected

6cc1d3030667d2c57cceac870c0d8480cce45905

Last affected

74be972b0e04f0cd78ee4df46f167060fc9cc249

Last affected

851ea182cfa6521a8385d51a98f8ecdca539c831

Last affected

8a4288508e9de344b6ac37f8c2bc63f7c050991e

Last affected

98b4a3491bedad8ea96faa057459fb1dcabfab9c

Last affected

9da023a3bcca8e984a461dc7a89bd3a470196c12

Last affected

a6fb418be7adccdd583a3b489b58023cfdd392ef

Last affected

a8e0112c7c540307e263d00306cb06f473547cea

Last affected

add4fe9079dda8fb0bfd9763da85d65ed0063523

Last affected

b02db8daa41933f628903c316f7a1e283443d08e

Last affected

b0574ae788d3379915996fb5bd0db2721f0634cd

Last affected

b3413711e12c1357cb63cdbdaa250786f9119032

Last affected

b6d7caea3867a50333b5326883213f6ce58f5194

Last affected

b7676d1465ed6acb3fa339f6b4efc63d07410f69

Last affected

b85f6018c803fb9aad82820d4b5505179ec5bac3

Last affected

ba749600e9f29910632b67f93fc348e287e673f4

Last affected

baf4349dd5769b9bca4ac08f869f7b0fbb01a4ed

Last affected

bc0f537280d7b34c717629312015170344289e5c

Last affected

c0aa42785d6b942b58a167da80f5e64385beff02

Last affected

c0bc3a3735aa9b5a44006e9dce2fb5e934b5e714

Last affected

c2633a95a88f5f777fc94a25a07f1faa47420fc5

Last affected

c7a93d73a64be116d52aea0972e9a47c3234c73c

Last affected

c88a4f4923fef8243e7e9dea4ab57f620f3a387a

Last affected

c9f30951604ea5e5a25b404de1fb54158cae2b80

Last affected

cd89c8372cbc5868f23094a9b7481be21a89a7e9

Last affected

d2e900757d8e8e2a82cb14e79814ed3cbc8d93c1

Last affected

dbf87d3867c1771a09029b733c8de1e134e270e4

Last affected

df33344d8eb40221d60c99931690703a11d91bc2

Last affected

e005eb7968bf7fb4bd2a09ca2335bddb78a4b4e6

Last affected

e05a4321d4c550542d16843595cd75c1ce37fdca

Last affected

e1e735a1ac169a52127e2a2b36444f4b15f89b15

Last affected

ed09ee74fcd4929c3ca11ce821b70e1d3ee0d5d8

Last affected

f139544a362c7601ee703d04977909c4686ee88c

Last affected

f14dcca985e4e76586a19d9d1f4ac6a7dafd4f91

Last affected

f312bf9ec12edaddb7693e5759ef71c1b904b2fb

Last affected

f6fd10202cc6d67e0c1324c858cea23372a6cacd

Last affected

fcc634b483255bedf53f3aea40334c018e13dcce

Last affected

fd69161868b5aa4d644488cc4e8069ba40266576

Affected versions

ldb-1.*

ldb-1.1.0

ldb-1.1.10

ldb-1.1.11

ldb-1.1.12

ldb-1.1.13

ldb-1.1.14

ldb-1.1.15

ldb-1.1.16

ldb-1.1.17

ldb-1.1.18

ldb-1.1.19

ldb-1.1.2

ldb-1.1.20

ldb-1.1.21

ldb-1.1.3

ldb-1.1.4

ldb-1.1.5

ldb-1.1.6

ldb-1.1.8

ldb-1.1.9

samba-4.*

samba-4.0.0

samba-4.0.0alpha10

samba-4.0.0alpha11

samba-4.0.0alpha13

samba-4.0.0alpha14

samba-4.0.0alpha15

samba-4.0.0alpha16

samba-4.0.0alpha17

samba-4.0.0alpha18

samba-4.0.0alpha19

samba-4.0.0alpha20

samba-4.0.0alpha21

samba-4.0.0alpha6

samba-4.0.0alpha7

samba-4.0.0alpha8

samba-4.0.0alpha9

samba-4.0.0beta1

samba-4.0.0beta2

samba-4.0.0beta3

samba-4.0.0beta4

samba-4.0.0beta5

samba-4.0.0beta6

samba-4.0.0beta7

samba-4.0.0beta8

samba-4.0.0rc1

samba-4.0.0rc2

samba-4.0.0rc3

samba-4.0.0rc4

samba-4.0.0rc5

samba-4.0.0rc6

samba-4.0.1

samba-4.0.2

samba-4.0.3

samba-4.1.0

samba-4.1.0rc1

samba-4.1.0rc2

samba-4.1.0rc3

samba-4.1.0rc4

samba-4.1.1

samba-4.1.2

samba-4.1.3

samba-4.1.4

samba-4.1.5

samba-4.2.0

samba-4.2.0rc1

samba-4.2.0rc2

samba-4.2.0rc3

samba-4.2.0rc4

samba-4.2.0rc5

samba-4.2.1

samba-4.2.2

samba-4.2.3

samba-4.2.4

samba-4.2.5

samba-4.2.6

samba-4.3.0

samba-4.3.0rc1

samba-4.3.0rc2

samba-4.3.0rc3

samba-4.3.0rc4

samba-4.3.1

samba-4.3.2

samba-4.3.3

samba-4.3.4

talloc-1.*

talloc-1.3.1

talloc-2.*

talloc-2.0.0

talloc-2.0.1

talloc-2.0.7

talloc-2.0.8

talloc-2.1.0

talloc-2.1.1

talloc-2.1.2

talloc-2.1.3

tdb-1.*

tdb-1.1.5

tdb-1.2.0

tdb-1.2.1

tdb-1.2.10

tdb-1.2.11

tdb-1.2.12

tdb-1.2.13

tdb-1.3.0

tdb-1.3.1

tdb-1.3.2

tdb-1.3.3

tdb-1.3.4

tdb-1.3.5

tdb-1.3.6

tdb-1.3.7

tevent-0.*

tevent-0.9.11

tevent-0.9.12

tevent-0.9.13

tevent-0.9.14

tevent-0.9.15

tevent-0.9.16

tevent-0.9.17

tevent-0.9.18

tevent-0.9.19

tevent-0.9.20

tevent-0.9.21

tevent-0.9.22

tevent-0.9.23

tevent-0.9.24

tevent-0.9.25

tevent-0.9.8