Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509…
Priority LOW 37CWE-310Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat.
Summary
Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof LDAPS and HTTPS servers and obtain sensitive information via a crafted certificate.
Why it matters now
EPSS 0.02657 85th percentileScored 2026-11-07
Fix Fixed Red Hat: 4 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 75
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:* | 4.0.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:* | 4.0.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:* | 4.0.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:* | 4.0.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:* | 4.0.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:* | 4.0.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:* | 4.0.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:* | 4.0.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:* | 4.0.9 | Vulnerable | Samba |
- cpe:2.3:a:samba:samba:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.2:*:*:*:*:*:*:* Versions 4.0.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.3:*:*:*:*:*:*:* Versions 4.0.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.4:*:*:*:*:*:*:* Versions 4.0.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.5:*:*:*:*:*:*:* Versions 4.0.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.6:*:*:*:*:*:*:* Versions 4.0.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.7:*:*:*:*:*:*:* Versions 4.0.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.8:*:*:*:*:*:*:* Versions 4.0.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.9:*:*:*:*:*:*:* Versions 4.0.9 Vulnerable ·Samba
Show 65 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:* | 4.0.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:* | 4.0.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:* | 4.0.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:* | 4.0.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:* | 4.0.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:* | 4.0.15 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:* | 4.0.16 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:* | 4.0.17 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:* | 4.0.18 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:* | 4.0.19 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:* | 4.0.20 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:* | 4.0.21 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:* | 4.0.22 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:* | 4.0.23 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:* | 4.0.24 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.25:*:*:*:*:*:*:* | 4.0.25 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.0.26:*:*:*:*:*:*:* | 4.0.26 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:* | 4.1.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:* | 4.1.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:* | 4.1.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:* | 4.1.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:* | 4.1.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:* | 4.1.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:* | 4.1.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:* | 4.1.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:* | 4.1.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:* | 4.1.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:* | 4.1.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:* | 4.1.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:* | 4.1.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:* | 4.1.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:* | 4.1.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:* | 4.1.15 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:* | 4.1.16 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:* | 4.1.17 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:* | 4.1.18 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:* | 4.1.19 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:* | 4.1.20 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:* | 4.1.21 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:* | 4.1.22 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.1.23:*:*:*:*:*:*:* | 4.1.23 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:* | 4.2.0 rc1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:* | 4.2.0 rc2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:* | 4.2.0 rc3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:* | 4.2.0 rc4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:* | 4.2.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:* | 4.2.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:* | 4.2.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:* | 4.2.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:* | 4.2.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:* | 4.2.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:* | 4.2.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:* | 4.2.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.2.9:*:*:*:*:*:*:* | 4.2.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:* | 4.3.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:* | 4.3.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:* | 4.3.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:* | 4.3.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:* | 4.3.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:* | 4.3.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.3.6:*:*:*:*:*:*:* | 4.3.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:4.4.0:*:*:*:*:*:*:* | 4.4.0 | Vulnerable | Samba |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* | 15.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | 16.04 | Vulnerable | Canonical |
- cpe:2.3:a:samba:samba:4.0.10:*:*:*:*:*:*:* Versions 4.0.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.11:*:*:*:*:*:*:* Versions 4.0.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.12:*:*:*:*:*:*:* Versions 4.0.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.13:*:*:*:*:*:*:* Versions 4.0.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.14:*:*:*:*:*:*:* Versions 4.0.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.15:*:*:*:*:*:*:* Versions 4.0.15 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.16:*:*:*:*:*:*:* Versions 4.0.16 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.17:*:*:*:*:*:*:* Versions 4.0.17 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.18:*:*:*:*:*:*:* Versions 4.0.18 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.19:*:*:*:*:*:*:* Versions 4.0.19 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.20:*:*:*:*:*:*:* Versions 4.0.20 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.21:*:*:*:*:*:*:* Versions 4.0.21 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.22:*:*:*:*:*:*:* Versions 4.0.22 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.23:*:*:*:*:*:*:* Versions 4.0.23 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.24:*:*:*:*:*:*:* Versions 4.0.24 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.25:*:*:*:*:*:*:* Versions 4.0.25 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.0.26:*:*:*:*:*:*:* Versions 4.0.26 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.1:*:*:*:*:*:*:* Versions 4.1.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.2:*:*:*:*:*:*:* Versions 4.1.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.3:*:*:*:*:*:*:* Versions 4.1.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.4:*:*:*:*:*:*:* Versions 4.1.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.5:*:*:*:*:*:*:* Versions 4.1.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.6:*:*:*:*:*:*:* Versions 4.1.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.7:*:*:*:*:*:*:* Versions 4.1.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.8:*:*:*:*:*:*:* Versions 4.1.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.9:*:*:*:*:*:*:* Versions 4.1.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.10:*:*:*:*:*:*:* Versions 4.1.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.11:*:*:*:*:*:*:* Versions 4.1.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.12:*:*:*:*:*:*:* Versions 4.1.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.13:*:*:*:*:*:*:* Versions 4.1.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.14:*:*:*:*:*:*:* Versions 4.1.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.15:*:*:*:*:*:*:* Versions 4.1.15 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.16:*:*:*:*:*:*:* Versions 4.1.16 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.17:*:*:*:*:*:*:* Versions 4.1.17 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.18:*:*:*:*:*:*:* Versions 4.1.18 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.19:*:*:*:*:*:*:* Versions 4.1.19 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.20:*:*:*:*:*:*:* Versions 4.1.20 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.21:*:*:*:*:*:*:* Versions 4.1.21 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.22:*:*:*:*:*:*:* Versions 4.1.22 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.1.23:*:*:*:*:*:*:* Versions 4.1.23 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.0:rc1:*:*:*:*:*:* Versions 4.2.0 rc1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.0:rc2:*:*:*:*:*:* Versions 4.2.0 rc2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.0:rc3:*:*:*:*:*:* Versions 4.2.0 rc3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.0:rc4:*:*:*:*:*:* Versions 4.2.0 rc4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.1:*:*:*:*:*:*:* Versions 4.2.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.2:*:*:*:*:*:*:* Versions 4.2.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.3:*:*:*:*:*:*:* Versions 4.2.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.4:*:*:*:*:*:*:* Versions 4.2.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.5:*:*:*:*:*:*:* Versions 4.2.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.6:*:*:*:*:*:*:* Versions 4.2.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.7:*:*:*:*:*:*:* Versions 4.2.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.8:*:*:*:*:*:*:* Versions 4.2.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.2.9:*:*:*:*:*:*:* Versions 4.2.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.3.0:*:*:*:*:*:*:* Versions 4.3.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.3.1:*:*:*:*:*:*:* Versions 4.3.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.3.2:*:*:*:*:*:*:* Versions 4.3.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.3.4:*:*:*:*:*:*:* Versions 4.3.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.3.5:*:*:*:*:*:*:* Versions 4.3.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.3.6:*:*:*:*:*:*:* Versions 4.3.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:4.4.0:*:*:*:*:*:*:* Versions 4.4.0 Vulnerable ·Samba
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* Versions 15.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
Remediation
Red Hat 4 advisories
- RHSA-2016:0618 Released 2016-04-13 · Red Hat rating Criticalsamba security, bug fix, and enhancement update
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) ipa-4.1.0-18.el7_1.6, ipa-client-4.1.0-18.el7_1.6, ipa-python-4.1.0-18.el7_1.6 +17
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) ipa-admintools-4.1.0-18.el7_1.6, ipa-server-4.1.0-18.el7_1.6, ipa-server-trust-ad-4.1.0-18.el7_1.6 +24
- Red Hat Enterprise Linux Server EUS (v. 7.1) ipa-4.1.0-18.ael7b_1.6, ipa-4.1.0-18.el7_1.6, ipa-admintools-4.1.0-18.ael7b_1.6 +47
- Red Hat Enterprise Linux Server Optional EUS (v. 7.1) ctdb-4.2.10-5.ael7b_1, ctdb-devel-4.2.10-5.ael7b_1, ctdb-tests-4.2.10-5.ael7b_1 +47
- Red Hat Enterprise Linux Server Resilient Storage EUS (v. 7.1) ctdb-4.2.10-5.el7_1, ctdb-devel-4.2.10-5.el7_1, ctdb-tests-4.2.10-5.el7_1
- RHSA-2016:0612 Released 2016-04-13 · Red Hat rating Criticalsamba and samba4 security, bug fix, and enhancement update
- Red Hat Enterprise Linux Client (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1, ipa-python-4.2.0-15.el7_2.6.1 +18
- Red Hat Enterprise Linux Client Optional (v. 7) ipa-admintools-4.2.0-15.el7_2.6.1, ipa-server-4.2.0-15.el7_2.6.1, ipa-server-dns-4.2.0-15.el7_2.6.1 +28
- Red Hat Enterprise Linux ComputeNode (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1, ipa-python-4.2.0-15.el7_2.6.1 +17
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-admintools-4.2.0-15.el7_2.6.1, ipa-server-4.2.0-15.el7_2.6.1, ipa-server-dns-4.2.0-15.el7_2.6.1 +25
- Red Hat Enterprise Linux Desktop (v. 6) ipa-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2, ipa-python-3.0.0-47.el6_7.2 +26
- Red Hat Enterprise Linux Desktop Optional (v. 6) ipa-admintools-3.0.0-47.el6_7.2, ipa-server-3.0.0-47.el6_7.2, ipa-server-selinux-3.0.0-47.el6_7.2 +8
- Red Hat Enterprise Linux HPC Node (v. 6) ipa-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2, ipa-python-3.0.0-47.el6_7.2 +25
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ipa-admintools-3.0.0-47.el6_7.2, ipa-server-3.0.0-47.el6_7.2, ipa-server-selinux-3.0.0-47.el6_7.2 +5
- Red Hat Enterprise Linux Server (v. 6) ipa-3.0.0-47.el6_7.2, ipa-admintools-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2 +38
- Red Hat Enterprise Linux Server (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-admintools-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1 +36
- Red Hat Enterprise Linux Server Optional (v. 6) ldb-tools-1.1.25-2.el6_7, openchange-1.0-7.el6_7, openchange-client-1.0-7.el6_7 +4
- Red Hat Enterprise Linux Server Optional (v. 7) ldb-tools-1.1.25-1.el7_2, libldb-devel-1.1.25-1.el7_2, libldb-devel-1.1.25-1.el7_2.ppc +36
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb-4.2.10-6.el7_2, ctdb-devel-4.2.10-6.el7_2, ctdb-tests-4.2.10-6.el7_2
- Red Hat Enterprise Linux Workstation (v. 6) ipa-3.0.0-47.el6_7.2, ipa-admintools-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2 +31
- Red Hat Enterprise Linux Workstation (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-admintools-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1 +26
- Red Hat Enterprise Linux Workstation Optional (v. 6) ldb-tools-1.1.25-2.el6_7, openchange-client-1.0-7.el6_7, openchange-devel-1.0-7.el6_7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) ldb-tools-1.1.25-1.el7_2, libldb-devel-1.1.25-1.el7_2, libsmbclient-devel-4.2.10-6.el7_2 +19
- RHSA-2016:0614 Released 2016-04-12 · Red Hat rating Criticalsamba security, bug fix, and enhancement update
- Red Hat Gluster 3 Samba on RHEL-6 ctdb-4.2.11-2.el6rhs, ctdb-devel-4.2.11-2.el6rhs, ctdb-tests-4.2.11-2.el6rhs +35
- Red Hat Gluster 3 Samba on RHEL-7 ctdb-4.2.11-2.el7rhgs, ctdb-devel-4.2.11-2.el7rhgs, ctdb-tests-4.2.11-2.el7rhgs +40
- Red Hat Gluster Storage Server 3.1 on RHEL-6 ldb-tools-1.1.24-1.el6rhs, libldb-1.1.24-1.el6rhs, libldb-devel-1.1.24-1.el6rhs +2
Show 1 more Red Hat advisories
- RHSA-2016:0620 Released 2016-04-12 · Red Hat rating Criticalsamba4 security, bug fix, and enhancement update
- Red Hat Enterprise Linux HPC Node EUS (v. 6.6) ipa-3.0.0-42.el6_6.1, ipa-client-3.0.0-42.el6_6.1, ipa-python-3.0.0-42.el6_6.1 +16
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) ipa-admintools-3.0.0-42.el6_6.1, ipa-server-3.0.0-42.el6_6.1, ipa-server-selinux-3.0.0-42.el6_6.1 +3
- Red Hat Enterprise Linux Server AUS (v. 6.2) libipa_hbac-1.5.1-66.el6_2.5, libipa_hbac-python-1.5.1-66.el6_2.5, libldb-1.1.25-2.el6_2 +4
- Red Hat Enterprise Linux Server AUS (v. 6.4) ipa-3.0.0-26.el6_4.5, ipa-admintools-3.0.0-26.el6_4.5, ipa-client-3.0.0-26.el6_4.5 +27
- Red Hat Enterprise Linux Server AUS (v. 6.5) ipa-3.0.0-37.el6_5.1, ipa-admintools-3.0.0-37.el6_5.1, ipa-client-3.0.0-37.el6_5.1 +27
- Red Hat Enterprise Linux Server EUS (v. 6.6) ipa-3.0.0-42.el6_6.1, ipa-admintools-3.0.0-42.el6_6.1, ipa-client-3.0.0-42.el6_6.1 +22
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) evolution-mapi-0.28.3-8.el6_2, evolution-mapi-devel-0.28.3-8.el6_2, ldb-tools-1.1.25-2.el6_2 +14
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4) ldb-tools-1.1.25-2.el6_4, libipa_hbac-devel-1.9.2-82.12.el6_4, libldb-1.1.25-2.el6_4 +9
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) ldb-tools-1.1.25-2.el6_5, libipa_hbac-devel-1.9.2-129.el6_5.7, libldb-1.1.25-2.el6_5 +9
- Red Hat Enterprise Linux Server Optional EUS (v. 6.6) ldb-tools-1.1.25-2.el6_6, openchange-1.0-7.el6_6, openchange-client-1.0-7.el6_6 +3
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux HPC Node EUS (v. 6.6) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Server AUS (v. 6.2) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux Server AUS (v. 6.4) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux Server AUS (v. 6.5) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux Server EUS (v. 6.6) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux Server EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.2) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.4) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.5) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux Server Optional EUS (v. 6.6) | Fixed | RHSA-2016:0620 |
| Red Hat Enterprise Linux Server Optional EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux Server Resilient Storage (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Server Resilient Storage EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Gluster 3 Samba on RHEL-6 | Fixed | RHSA-2016:0614 |
| Red Hat Gluster 3 Samba on RHEL-7 | Fixed | RHSA-2016:0614 |
| Red Hat Gluster Storage Server 3.1 on RHEL-6 | Fixed | RHSA-2016:0614 |
Not affected: 3 products
- Red Hat Enterprise Linux 4
- Red Hat Enterprise Linux 5
- Red Hat Enterprise Linux 6
Timeline
- 2026-10-02 Threatist record created from CVE-2016-2113
- 2026-10-03 Alias added: GHSA-j9wg-qqgj-ph9r
References
Advisory 23
- SSA:2016-106-02
- SUSE-SU-2016:1022
- RHSA-2016:0612
- USN-2950-1
- SUSE-SU-2016:1028
- openSUSE-SU-2016:1064
- USN-2950-5
- FEDORA-2016-be53260726
- RHSA-2016:0618
- SUSE-SU-2016:1024
- SUSE-SU-2016:1023
- FEDORA-2016-48b3761baa
- RHSA-2016:0614
- openSUSE-SU-2016:1025
- RHSA-2016:0620
- openSUSE-SU-2016:1106
- USN-2950-3
- FEDORA-2016-383fce04e2
- openSUSE-SU-2016:1107
- GLSA-201612-47
- DSA-3548
- USN-2950-2
- USN-2950-4
Sources
- CVE-2016-2113 · CVE Program
- CVE-2016-2113 · NVD
- FIRST EPSS
- GHSA-j9wg-qqgj-ph9r · GitHub Advisory Database · CC BY 4.0
- CVE-2016-2113 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences