CVE-2016-2124
samba - security update
5.9
MEDIUM
CVSS 3.1
EPSS 0.70%
Description
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
How to fix CVE-2016-2124
To remediate CVE-2016-2124, upgrade the affected package to a fixed version below.
- Alpine/samba—upgrade to 4.13.17-r0 or later
- —upgrade to 2:4.13.13+dfsg-1~deb11u2 or later
- —upgrade to 2:4.9.5+dfsg-5+deb10u4 or later
- —upgrade to 2:4.13.13+dfsg-1~deb11u2 or later
Is CVE-2016-2124 being exploited?
Low — EPSS is 0.7%, meaning exploitation activity has not been observed at scale.
Affected packages (4)
- from 0, < 4.13.17-r0
- from 0, < 2:4.13.13+dfsg-1~deb11u2
- from 0, < 2:4.9.5+dfsg-5+deb10u4
- from 0, < 2:4.13.13+dfsg-1~deb11u2
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |