CVE-2016-2125
Fixed in a distro release EPSS 9%CVSS 6.4
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
Products: samba, redhat gluster_storage, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.2 | samba | 4.2.14-r1 |
| Alpine 3.3 | samba | 4.2.14-r1 |
| Alpine 3.4 | samba | 4.4.5-r2 |
| Arch Linux | samba | 4.5.3-1 |
| Debian 12 | samba | 2:4.5.2+dfsg-2 |
| Debian 13 | samba | 2:4.5.2+dfsg-2 |
| Debian 14 | samba | 2:4.5.2+dfsg-2 |
| Debian 7 | samba | 2:3.6.6-6+deb7u11 |
| Debian 8 | samba | 2:4.2.14+dfsg-0+deb8u2 |
| Red Hat Enterprise Linux 6 | libsmbclient | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | libsmbclient-devel | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-client | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-common | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-debuginfo | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-doc | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-domainjoin-gui | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-glusterfs | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-swat | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-winbind | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-winbind-clients | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-winbind-devel | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba-winbind-krb5-locator | 0:3.6.23-41.el6 |
| Red Hat Enterprise Linux 6 | samba4 | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-client | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-common | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-dc | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-dc-libs | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-debuginfo | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-devel | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-libs | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-pidl | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-python | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-test | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-winbind | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-winbind-clients | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 6 | samba4-winbind-krb5-locator | 0:4.2.10-9.el6 |
| Red Hat Enterprise Linux 7 | ctdb | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | ctdb-tests | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | libsmbclient | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | libsmbclient-devel | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | libwbclient | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | libwbclient-devel | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-client | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-client-libs | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-common | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-common-libs | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-common-tools | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-dc | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-dc-libs | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-debuginfo | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-devel | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-krb5-printing | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-libs | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-pidl | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-python | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-test | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-test-libs | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-vfs-glusterfs | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-winbind | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-winbind-clients | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-winbind-krb5-locator | 0:4.4.4-13.el7_3 |
| Red Hat Enterprise Linux 7 | samba-winbind-modules | 0:4.4.4-13.el7_3 |
| Red Hat storage 3.2 samba el6 | ctdb | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | ctdb-tests | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | libsmbclient | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | libsmbclient-devel | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | libwbclient | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | libwbclient-devel | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-client | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-client-libs | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-common | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-common-libs | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-common-tools | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-dc | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-dc-libs | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-debuginfo | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-devel | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-krb5-printing | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-libs | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-pidl | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-python | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-test | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-test-libs | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-vfs-glusterfs | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-winbind | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-winbind-clients | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-winbind-krb5-locator | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el6 | samba-winbind-modules | 0:4.4.6-4.el6rhs |
| Red Hat storage 3.2 samba el7 | ctdb | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | ctdb-tests | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | libsmbclient | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | libsmbclient-devel | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | libwbclient | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | libwbclient-devel | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-client | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-client-libs | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-common | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-common-libs | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-common-tools | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-dc | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-dc-libs | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-debuginfo | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-devel | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-krb5-printing | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-libs | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-pidl | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-python | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-test | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-test-libs | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-vfs-glusterfs | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-winbind | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-winbind-clients | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-winbind-krb5-locator | 0:4.4.6-4.el7rhgs |
| Red Hat storage 3.2 samba el7 | samba-winbind-modules | 0:4.4.6-4.el7rhgs |
| SUSE Linux Enterprise Desktop 12 SP1 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | samba | 4.4.2-31.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise High Availability Extension 12 | samba | 4.2.4-18.30.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP1 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP2 | samba | 4.4.2-31.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | samba | 3.6.3-84.1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | samba-doc | 3.6.3-84.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | samba | 3.6.3-56.1 |
| SUSE Linux Enterprise Server 11 SP2-LTSS | samba-doc | 3.6.3-56.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | samba | 3.6.3-84.1 |
| SUSE Linux Enterprise Server 11 SP3-LTSS | samba-doc | 3.6.3-84.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | samba | 3.6.3-84.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | samba-doc | 3.6.3-84.1 |
| SUSE Linux Enterprise Server 11 SP4 | samba | 3.6.3-84.1 |
| SUSE Linux Enterprise Server 11 SP4 | samba-doc | 3.6.3-84.1 |
| SUSE Linux Enterprise Server 12 SP1 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | samba | 4.4.2-31.1 |
| SUSE Linux Enterprise Server 12-LTSS | samba | 4.2.4-18.30.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | samba | 4.4.2-31.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | samba | 3.6.3-84.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | samba-doc | 3.6.3-84.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | samba | 4.2.4-18.30.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | samba | 4.4.2-31.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | samba | 3.6.3-84.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | samba | 4.2.4-28.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | samba | 4.4.2-31.1 |
| SUSE Manager 2.1 | samba | 3.6.3-84.1 |
| SUSE Manager 2.1 | samba-doc | 3.6.3-84.1 |
| SUSE Manager Proxy 2.1 | samba | 3.6.3-84.1 |
| SUSE Manager Proxy 2.1 | samba-doc | 3.6.3-84.1 |
| SUSE OpenStack Cloud 5 | samba | 3.6.3-84.1 |
| SUSE OpenStack Cloud 5 | samba-doc | 3.6.3-84.1 |
| Ubuntu 14.04 LTS | samba | 2:4.3.11+dfsg-0ubuntu0.14.04.4 |
| Ubuntu 16.04 LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.3 |
| openSUSE Tumbleweed | samba | 4.14.6+git.182.2205d5224e3-1.1 |