The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11…
Priority MEDIUM 59CWE-254Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat.
Summary
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
Why it matters now
EPSS 0.37181 98th percentileScored 2026-11-07
Fix Fixed Red Hat: 11 advisories
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 9
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* | 3.6.0 to before 4.2.10; 4.3.0 to before 4.3.7; 4.4.0 to before 4.4.1 | Vulnerable | Samba |
| cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* | 12.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* | 14.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* | 15.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | 16.04 | Vulnerable | Canonical |
| cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
- cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* Versions 3.6.0 to before 4.2.10; 4.3.0 to before 4.3.7; 4.4.0 to before 4.4.1 Vulnerable ·Samba
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* Versions 12.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:* Versions 15.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* Versions 16.04 Vulnerable ·Canonical
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
Remediation
Red Hat 11 advisories
- RHSA-2016:0618 Released 2016-04-13 · Red Hat rating Criticalsamba security, bug fix, and enhancement update
- Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) ipa-4.1.0-18.el7_1.6, ipa-client-4.1.0-18.el7_1.6, ipa-python-4.1.0-18.el7_1.6 +17
- Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) ipa-admintools-4.1.0-18.el7_1.6, ipa-server-4.1.0-18.el7_1.6, ipa-server-trust-ad-4.1.0-18.el7_1.6 +24
- Red Hat Enterprise Linux Server EUS (v. 7.1) ipa-4.1.0-18.ael7b_1.6, ipa-4.1.0-18.el7_1.6, ipa-admintools-4.1.0-18.ael7b_1.6 +47
- Red Hat Enterprise Linux Server Optional EUS (v. 7.1) ctdb-4.2.10-5.ael7b_1, ctdb-devel-4.2.10-5.ael7b_1, ctdb-tests-4.2.10-5.ael7b_1 +47
- Red Hat Enterprise Linux Server Resilient Storage EUS (v. 7.1) ctdb-4.2.10-5.el7_1, ctdb-devel-4.2.10-5.el7_1, ctdb-tests-4.2.10-5.el7_1
- RHSA-2016:0612 Released 2016-04-13 · Red Hat rating Criticalsamba and samba4 security, bug fix, and enhancement update
- Red Hat Enterprise Linux Client (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1, ipa-python-4.2.0-15.el7_2.6.1 +18
- Red Hat Enterprise Linux Client Optional (v. 7) ipa-admintools-4.2.0-15.el7_2.6.1, ipa-server-4.2.0-15.el7_2.6.1, ipa-server-dns-4.2.0-15.el7_2.6.1 +28
- Red Hat Enterprise Linux ComputeNode (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1, ipa-python-4.2.0-15.el7_2.6.1 +17
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-admintools-4.2.0-15.el7_2.6.1, ipa-server-4.2.0-15.el7_2.6.1, ipa-server-dns-4.2.0-15.el7_2.6.1 +25
- Red Hat Enterprise Linux Desktop (v. 6) ipa-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2, ipa-python-3.0.0-47.el6_7.2 +26
- Red Hat Enterprise Linux Desktop Optional (v. 6) ipa-admintools-3.0.0-47.el6_7.2, ipa-server-3.0.0-47.el6_7.2, ipa-server-selinux-3.0.0-47.el6_7.2 +8
- Red Hat Enterprise Linux HPC Node (v. 6) ipa-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2, ipa-python-3.0.0-47.el6_7.2 +25
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ipa-admintools-3.0.0-47.el6_7.2, ipa-server-3.0.0-47.el6_7.2, ipa-server-selinux-3.0.0-47.el6_7.2 +5
- Red Hat Enterprise Linux Server (v. 6) ipa-3.0.0-47.el6_7.2, ipa-admintools-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2 +38
- Red Hat Enterprise Linux Server (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-admintools-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1 +36
- Red Hat Enterprise Linux Server Optional (v. 6) ldb-tools-1.1.25-2.el6_7, openchange-1.0-7.el6_7, openchange-client-1.0-7.el6_7 +4
- Red Hat Enterprise Linux Server Optional (v. 7) ldb-tools-1.1.25-1.el7_2, libldb-devel-1.1.25-1.el7_2, libldb-devel-1.1.25-1.el7_2.ppc +36
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb-4.2.10-6.el7_2, ctdb-devel-4.2.10-6.el7_2, ctdb-tests-4.2.10-6.el7_2
- Red Hat Enterprise Linux Workstation (v. 6) ipa-3.0.0-47.el6_7.2, ipa-admintools-3.0.0-47.el6_7.2, ipa-client-3.0.0-47.el6_7.2 +31
- Red Hat Enterprise Linux Workstation (v. 7) ipa-4.2.0-15.el7_2.6.1, ipa-admintools-4.2.0-15.el7_2.6.1, ipa-client-4.2.0-15.el7_2.6.1 +26
- Red Hat Enterprise Linux Workstation Optional (v. 6) ldb-tools-1.1.25-2.el6_7, openchange-client-1.0-7.el6_7, openchange-devel-1.0-7.el6_7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 7) ldb-tools-1.1.25-1.el7_2, libldb-devel-1.1.25-1.el7_2, libsmbclient-devel-4.2.10-6.el7_2 +19
- RHSA-2016:0614 Released 2016-04-12 · Red Hat rating Criticalsamba security, bug fix, and enhancement update
- Red Hat Gluster 3 Samba on RHEL-6 ctdb-4.2.11-2.el6rhs, ctdb-devel-4.2.11-2.el6rhs, ctdb-tests-4.2.11-2.el6rhs +35
- Red Hat Gluster 3 Samba on RHEL-7 ctdb-4.2.11-2.el7rhgs, ctdb-devel-4.2.11-2.el7rhgs, ctdb-tests-4.2.11-2.el7rhgs +40
- Red Hat Gluster Storage Server 3.1 on RHEL-6 ldb-tools-1.1.24-1.el6rhs, libldb-1.1.24-1.el6rhs, libldb-devel-1.1.24-1.el6rhs +2
Show 8 more Red Hat advisories
- RHSA-2016:0620 Released 2016-04-12 · Red Hat rating Criticalsamba4 security, bug fix, and enhancement update
- Red Hat Enterprise Linux HPC Node EUS (v. 6.6) ipa-3.0.0-42.el6_6.1, ipa-client-3.0.0-42.el6_6.1, ipa-python-3.0.0-42.el6_6.1 +16
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) ipa-admintools-3.0.0-42.el6_6.1, ipa-server-3.0.0-42.el6_6.1, ipa-server-selinux-3.0.0-42.el6_6.1 +3
- Red Hat Enterprise Linux Server AUS (v. 6.2) libipa_hbac-1.5.1-66.el6_2.5, libipa_hbac-python-1.5.1-66.el6_2.5, libldb-1.1.25-2.el6_2 +4
- Red Hat Enterprise Linux Server AUS (v. 6.4) ipa-3.0.0-26.el6_4.5, ipa-admintools-3.0.0-26.el6_4.5, ipa-client-3.0.0-26.el6_4.5 +27
- Red Hat Enterprise Linux Server AUS (v. 6.5) ipa-3.0.0-37.el6_5.1, ipa-admintools-3.0.0-37.el6_5.1, ipa-client-3.0.0-37.el6_5.1 +27
- Red Hat Enterprise Linux Server EUS (v. 6.6) ipa-3.0.0-42.el6_6.1, ipa-admintools-3.0.0-42.el6_6.1, ipa-client-3.0.0-42.el6_6.1 +22
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) evolution-mapi-0.28.3-8.el6_2, evolution-mapi-devel-0.28.3-8.el6_2, ldb-tools-1.1.25-2.el6_2 +14
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4) ldb-tools-1.1.25-2.el6_4, libipa_hbac-devel-1.9.2-82.12.el6_4, libldb-1.1.25-2.el6_4 +9
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) ldb-tools-1.1.25-2.el6_5, libipa_hbac-devel-1.9.2-129.el6_5.7, libldb-1.1.25-2.el6_5 +9
- Red Hat Enterprise Linux Server Optional EUS (v. 6.6) ldb-tools-1.1.25-2.el6_6, openchange-1.0-7.el6_6, openchange-client-1.0-7.el6_6 +3
- RHSA-2016:0625 Released 2016-04-12 · Red Hat rating Importantsamba security update
- Red Hat Enterprise Linux AS (v. 4 ELS) samba-3.0.33-3.37.el4, samba-3.0.33-3.37.el4.i386, samba-3.0.33-3.37.el4.ia64 +9
- Red Hat Enterprise Linux ES (v. 4 ELS) samba-3.0.33-3.37.el4, samba-3.0.33-3.37.el4.i386, samba-client-3.0.33-3.37.el4 +5
- RHSA-2016:0619 Released 2016-04-12 · Red Hat rating Criticalsamba security update
- Red Hat Enterprise Linux HPC Node EUS (v. 6.6) samba-3.6.23-30.el6_6, samba-client-3.6.23-30.el6_6, samba-common-3.6.23-30.el6_6 +2
- Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) libsmbclient-3.6.23-30.el6_6, libsmbclient-devel-3.6.23-30.el6_6, samba-3.6.23-30.el6_6 +6
- Red Hat Enterprise Linux Server AUS (v. 6.2) libsmbclient-3.6.23-30.el6_2, samba-3.6.23-30.el6_2, samba-client-3.6.23-30.el6_2 +3
- Red Hat Enterprise Linux Server AUS (v. 6.4) libsmbclient-3.6.23-30.el6_4, samba-3.6.23-30.el6_4, samba-client-3.6.23-30.el6_4 +3
- Red Hat Enterprise Linux Server AUS (v. 6.5) libsmbclient-3.6.23-30.el6_5, samba-3.6.23-30.el6_5, samba-client-3.6.23-30.el6_5 +3
- Red Hat Enterprise Linux Server EUS (v. 6.6) libsmbclient-3.6.23-30.el6_6, libsmbclient-3.6.23-30.el6_6.ppc, samba-3.6.23-30.el6_6 +6
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) libsmbclient-devel-3.6.23-30.el6_2, samba-3.6.23-30.el6_2, samba-doc-3.6.23-30.el6_2 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 6.4) libsmbclient-devel-3.6.23-30.el6_4, samba-3.6.23-30.el6_4, samba-doc-3.6.23-30.el6_4 +4
- Red Hat Enterprise Linux Server Optional AUS (v. 6.5) libsmbclient-devel-3.6.23-30.el6_5, samba-3.6.23-30.el6_5, samba-doc-3.6.23-30.el6_5 +4
- Red Hat Enterprise Linux Server Optional EUS (v. 6.6) libsmbclient-devel-3.6.23-30.el6_6, libsmbclient-devel-3.6.23-30.el6_6.ppc, samba-doc-3.6.23-30.el6_6 +6
- RHSA-2016:0623 Released 2016-04-12 · Red Hat rating Importantsamba security update
- Red Hat Enterprise Linux Long Life (v. 5.6 server) libsmbclient-3.0.33-3.30.el5_6, libsmbclient-3.0.33-3.30.el5_6.i386, libsmbclient-3.0.33-3.30.el5_6.ia64 +15
- Red Hat Enterprise Linux Long Life (v. 5.9 server) libsmbclient-3.0.33-3.40.el5_9, libsmbclient-3.0.33-3.40.el5_9.i386, libsmbclient-devel-3.0.33-3.40.el5_9 +9
- RHSA-2016:0624 Released 2016-04-12 · Red Hat rating Criticalsamba3x security update
- Red Hat Enterprise Linux Long Life (v. 5.6 server) samba3x-3.6.23-12.el5_6, samba3x-3.6.23-12.el5_6.i386, samba3x-3.6.23-12.el5_6.ia64 +21
- Red Hat Enterprise Linux Long Life (v. 5.9 server) samba3x-3.6.23-12.el5_9, samba3x-3.6.23-12.el5_9.i386, samba3x-client-3.6.23-12.el5_9 +13
- RHSA-2016:0621 Released 2016-04-12 · Red Hat rating Importantsamba security update
- Red Hat Enterprise Linux (v. 5 server) libsmbclient-3.0.33-3.41.el5_11, libsmbclient-3.0.33-3.41.el5_11.i386, libsmbclient-3.0.33-3.41.el5_11.ia64 +21
- Red Hat Enterprise Linux Desktop (v. 5 client) libsmbclient-3.0.33-3.41.el5_11, libsmbclient-3.0.33-3.41.el5_11.i386, samba-3.0.33-3.41.el5_11 +7
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) libsmbclient-devel-3.0.33-3.41.el5_11, libsmbclient-devel-3.0.33-3.41.el5_11.i386, samba-3.0.33-3.41.el5_11
- RHSA-2016:0613 Released 2016-04-12 · Red Hat rating Criticalsamba3x security update
- Red Hat Enterprise Linux (v. 5 server) samba3x-3.6.23-12.el5_11, samba3x-3.6.23-12.el5_11.i386, samba3x-3.6.23-12.el5_11.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) samba3x-3.6.23-12.el5_11, samba3x-3.6.23-12.el5_11.i386, samba3x-client-3.6.23-12.el5_11 +11
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) samba3x-3.6.23-12.el5_11, samba3x-winbind-devel-3.6.23-12.el5_11, samba3x-winbind-devel-3.6.23-12.el5_11.i386
- RHSA-2016:0611 Released 2016-04-12 · Red Hat rating Criticalsamba security update
- Red Hat Enterprise Linux Desktop (v. 6) libsmbclient-3.6.23-30.el6_7, samba-3.6.23-30.el6_7, samba-client-3.6.23-30.el6_7 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libsmbclient-devel-3.6.23-30.el6_7, samba-3.6.23-30.el6_7, samba-doc-3.6.23-30.el6_7 +5
- Red Hat Enterprise Linux HPC Node (v. 6) samba-3.6.23-30.el6_7, samba-client-3.6.23-30.el6_7, samba-common-3.6.23-30.el6_7 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libsmbclient-3.6.23-30.el6_7, libsmbclient-devel-3.6.23-30.el6_7, samba-3.6.23-30.el6_7 +6
- Red Hat Enterprise Linux Server (v. 6) libsmbclient-3.6.23-30.el6_7, libsmbclient-3.6.23-30.el6_7.ppc, samba-3.6.23-30.el6_7 +6
- Red Hat Enterprise Linux Server Optional (v. 6) libsmbclient-devel-3.6.23-30.el6_7, libsmbclient-devel-3.6.23-30.el6_7.ppc, samba-doc-3.6.23-30.el6_7 +6
- Red Hat Enterprise Linux Workstation (v. 6) libsmbclient-3.6.23-30.el6_7, samba-3.6.23-30.el6_7, samba-client-3.6.23-30.el6_7 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libsmbclient-devel-3.6.23-30.el6_7, samba-doc-3.6.23-30.el6_7, samba-domainjoin-gui-3.6.23-30.el6_7 +4
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2016:0613, RHSA-2016:0621 |
| Red Hat Enterprise Linux AS (v. 4 ELS) | Fixed | RHSA-2016:0625 |
| Red Hat Enterprise Linux Client (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Client Optional (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux ComputeNode (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux ComputeNode Optional (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2016:0613, RHSA-2016:0621 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2016:0611, RHSA-2016:0612 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2016:0611, RHSA-2016:0612 |
| Red Hat Enterprise Linux Desktop Workstation (v. 5 client) | Fixed | RHSA-2016:0613, RHSA-2016:0621 |
| Red Hat Enterprise Linux ES (v. 4 ELS) | Fixed | RHSA-2016:0625 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2016:0611, RHSA-2016:0612 |
| Red Hat Enterprise Linux HPC Node EUS (v. 6.6) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2016:0611, RHSA-2016:0612 |
| Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux Long Life (v. 5.6 server) | Fixed | RHSA-2016:0623, RHSA-2016:0624 |
| Red Hat Enterprise Linux Long Life (v. 5.9 server) | Fixed | RHSA-2016:0623, RHSA-2016:0624 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2016:0611, RHSA-2016:0612 |
| Red Hat Enterprise Linux Server (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Server AUS (v. 6.2) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux Server AUS (v. 6.4) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux Server AUS (v. 6.5) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux Server EUS (v. 6.6) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux Server EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2016:0611, RHSA-2016:0612 |
| Red Hat Enterprise Linux Server Optional (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.2) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.4) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux Server Optional AUS (v. 6.5) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux Server Optional EUS (v. 6.6) | Fixed | RHSA-2016:0619, RHSA-2016:0620 |
| Red Hat Enterprise Linux Server Optional EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux Server Resilient Storage (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Server Resilient Storage EUS (v. 7.1) | Fixed | RHSA-2016:0618 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2016:0611, RHSA-2016:0612 |
| Red Hat Enterprise Linux Workstation (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2016:0611, RHSA-2016:0612 |
| Red Hat Enterprise Linux Workstation Optional (v. 7) | Fixed | RHSA-2016:0612 |
| Red Hat Gluster 3 Samba on RHEL-6 | Fixed | RHSA-2016:0614 |
| Red Hat Gluster 3 Samba on RHEL-7 | Fixed | RHSA-2016:0614 |
| Red Hat Gluster Storage Server 3.1 on RHEL-6 | Fixed | RHSA-2016:0614 |
Timeline
- 2026-10-02 Threatist record created from CVE-2016-2118
- 2026-10-03 Alias added: GHSA-9r74-96x3-hvq9
References
Advisory 43
- SSA:2016-106-02
- SUSE-SU-2016:1022
- RHSA-2016:0612
- USN-2950-1
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05166182
- SUSE-SU-2016:1028
- RHSA-2016:0613
- http://badlock.org/
- RHSA-2016:0621
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- openSUSE-SU-2016:1064
- USN-2950-5
- https://www.samba.org/samba/history/samba-4.2.10.html
- FEDORA-2016-be53260726
- RHSA-2016:0624
- RHSA-2016:0618
- SUSE-SU-2016:1024
- SUSE-SU-2016:1023
- https://www.samba.org/samba/security/CVE-2016-2118.html
- https://www.samba.org/samba/latest_news.html#4.4.2
- FEDORA-2016-48b3761baa
- VU#813296
- RHSA-2016:0614
- https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes
- openSUSE-SU-2016:1025
- RHSA-2016:0620
- RHSA-2016:0611
- openSUSE-SU-2016:1106
- https://bto.bluecoat.com/security-advisory/sa122
- USN-2950-3
- FEDORA-2016-383fce04e2
- openSUSE-SU-2016:1107
- RHSA-2016:0619
- GLSA-201612-47
- DSA-3548
- RHSA-2016:0623
- USN-2950-2
- https://access.redhat.com/security/vulnerabilities/badlock
- RHSA-2016:0625
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40196
- USN-2950-4
- https://kb.netapp.com/support/s/article/ka51A0000008SXzQAM/smb-vulnerabilities-in-multiple-netapp-products
Sources
- CVE-2016-2118 · CVE Program
- CVE-2016-2118 · NVD
- FIRST EPSS
- GHSA-9r74-96x3-hvq9 · GitHub Advisory Database · CC BY 4.0
- CVE-2016-2118 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences