CVE-2016-2124

Katalog CVE

CVSS 5.9 · Medium EPSS 1,8%

Kerentanan Improper Authentication pada samba, debian linux +22 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

Rincian

Terbit di NVD

18 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.samba.org/samba/security/CVE-2016-2124.html mitigasi · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2019660 issue tracking · patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
• https://security.gentoo.org/glsa/202309-06