CVE-2016-2111: Medium severity samba vulnerability

Published Apr 25, 2016

Updated

The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain controller is configured, allows remote attackers to spoof the computer name of a secure channel's endpoint, and obtain sensitive session information, by running a crafted application and leveraging the ability to sniff network traffic, a related issue to CVE-2015-0005.

Affected Software

251 affected components

Samba Samba=3.0.0

Samba Samba=3.0.1

Samba Samba=3.0.2

Samba Samba=3.0.2-a

Samba Samba=3.0.2a

Samba Samba=3.0.3

Samba Samba=3.0.4

Samba Samba=3.0.4-rc1

Samba Samba=3.0.5

Samba Samba=3.0.6

Samba Samba=3.0.7

Samba Samba=3.0.8

Samba Samba=3.0.9

Samba Samba=3.0.10

Samba Samba=3.0.11

Samba Samba=3.0.12

Samba Samba=3.0.13

Samba Samba=3.0.14

Samba Samba=3.0.14-a

Samba Samba=3.0.14a

Samba Samba=3.0.15

Samba Samba=3.0.16

Samba Samba=3.0.17

Samba Samba=3.0.18

Samba Samba=3.0.19

Samba Samba=3.0.20

Samba Samba=3.0.20-a

Samba Samba=3.0.20-b

Samba Samba=3.0.20a

Samba Samba=3.0.20b

Samba Samba=3.0.21

Samba Samba=3.0.21-a

Samba Samba=3.0.21-b

Samba Samba=3.0.21-c

Samba Samba=3.0.21a

Samba Samba=3.0.21b

Samba Samba=3.0.21c

Samba Samba=3.0.22

Samba Samba=3.0.23

Samba Samba=3.0.23-a

Samba Samba=3.0.23-b

Samba Samba=3.0.23-c

Samba Samba=3.0.23-d

Samba Samba=3.0.23a

Samba Samba=3.0.23b

Samba Samba=3.0.23c

Samba Samba=3.0.23d

Samba Samba=3.0.24

Samba Samba=3.0.25

Samba Samba=3.0.25-a

Samba Samba=3.0.25-b

Samba Samba=3.0.25-c

Samba Samba=3.0.25-pre1

Samba Samba=3.0.25-pre2

Samba Samba=3.0.25-rc1

Samba Samba=3.0.25-rc2

Samba Samba=3.0.25-rc3

Samba Samba=3.0.25a

Samba Samba=3.0.25b

Samba Samba=3.0.25c

Samba Samba=3.0.26

Samba Samba=3.0.26-a

Samba Samba=3.0.26a

Samba Samba=3.0.27

Samba Samba=3.0.27-a

Samba Samba=3.0.28

Samba Samba=3.0.28-a

Samba Samba=3.0.29

Samba Samba=3.0.30

Samba Samba=3.0.31

Samba Samba=3.0.32

Samba Samba=3.0.33

Samba Samba=3.0.34

Samba Samba=3.0.35

Samba Samba=3.0.36

Samba Samba=3.0.37

Samba Samba=3.2.0

Samba Samba=3.2.1

Samba Samba=3.2.2

Samba Samba=3.2.3

Samba Samba=3.2.4

Samba Samba=3.2.5

Samba Samba=3.2.6

Samba Samba=3.2.7

Samba Samba=3.2.8

Samba Samba=3.2.9

Samba Samba=3.2.10

Samba Samba=3.2.11

Samba Samba=3.2.12

Samba Samba=3.2.13

Samba Samba=3.2.14

Samba Samba=3.2.15

Samba Samba=3.3.0

Samba Samba=3.3.1

Samba Samba=3.3.2

Samba Samba=3.3.3

Samba Samba=3.3.4

Samba Samba=3.3.5

Samba Samba=3.3.6

Samba Samba=3.3.7

Samba Samba=3.3.8

Samba Samba=3.3.9

Samba Samba=3.3.10

Samba Samba=3.3.11

Samba Samba=3.3.12

Samba Samba=3.3.13

Samba Samba=3.3.14

Samba Samba=3.3.15

Samba Samba=3.3.16

Samba Samba=3.4.0

Samba Samba=3.4.1

Samba Samba=3.4.2

Samba Samba=3.4.3

Samba Samba=3.4.4

Samba Samba=3.4.5

Samba Samba=3.4.6

Samba Samba=3.4.7

Samba Samba=3.4.8

Samba Samba=3.4.9

Samba Samba=3.4.10

Samba Samba=3.4.11

Samba Samba=3.4.12

Samba Samba=3.4.13

Samba Samba=3.4.14

Samba Samba=3.4.15

Samba Samba=3.4.16

Samba Samba=3.4.17

Samba Samba=3.5.0

Samba Samba=3.5.1

Samba Samba=3.5.2

Samba Samba=3.5.3

Samba Samba=3.5.4

Samba Samba=3.5.5

Samba Samba=3.5.6

Samba Samba=3.5.7

Samba Samba=3.5.8

Samba Samba=3.5.9

Samba Samba=3.5.10

Samba Samba=3.5.11

Samba Samba=3.5.12

Samba Samba=3.5.13

Samba Samba=3.5.14

Samba Samba=3.5.15

Samba Samba=3.5.16

Samba Samba=3.5.17

Samba Samba=3.5.18

Samba Samba=3.5.19

Samba Samba=3.5.20

Samba Samba=3.5.21

Samba Samba=3.5.22

Samba Samba=3.6.0

Samba Samba=3.6.1

Samba Samba=3.6.2

Samba Samba=3.6.3

Samba Samba=3.6.4

Samba Samba=3.6.5

Samba Samba=3.6.6

Samba Samba=3.6.7

Samba Samba=3.6.8

Samba Samba=3.6.9

Samba Samba=3.6.10

Samba Samba=3.6.11

Samba Samba=3.6.12

Samba Samba=3.6.13

Samba Samba=3.6.14

Samba Samba=3.6.15

Samba Samba=3.6.16

Samba Samba=3.6.17

Samba Samba=3.6.18

Samba Samba=3.6.19

Samba Samba=3.6.20

Samba Samba=3.6.21

Samba Samba=3.6.22

Samba Samba=3.6.23

Samba Samba=3.6.24

Samba Samba=3.6.25

Samba Samba=4.0.0

Samba Samba=4.0.1

Samba Samba=4.0.2

Samba Samba=4.0.3

Samba Samba=4.0.4

Samba Samba=4.0.5

Samba Samba=4.0.6

Samba Samba=4.0.7

Samba Samba=4.0.8

Samba Samba=4.0.9

Samba Samba=4.0.10

Samba Samba=4.0.11

Samba Samba=4.0.12

Samba Samba=4.0.13

Samba Samba=4.0.14

Samba Samba=4.0.15

Samba Samba=4.0.16

Samba Samba=4.0.17

Samba Samba=4.0.18

Samba Samba=4.0.19

Samba Samba=4.0.20

Samba Samba=4.0.21

Samba Samba=4.0.22

Samba Samba=4.0.23

Samba Samba=4.0.24

Samba Samba=4.0.25

Samba Samba=4.0.26

Samba Samba=4.1.0

Samba Samba=4.1.1

Samba Samba=4.1.2

Samba Samba=4.1.3

Samba Samba=4.1.4

Samba Samba=4.1.5

Samba Samba=4.1.6

Samba Samba=4.1.7

Samba Samba=4.1.8

Samba Samba=4.1.9

Samba Samba=4.1.10

Samba Samba=4.1.11

Samba Samba=4.1.12

Samba Samba=4.1.13

Samba Samba=4.1.14

Samba Samba=4.1.15

Samba Samba=4.1.16

Samba Samba=4.1.17

Samba Samba=4.1.18

Samba Samba=4.1.19

Samba Samba=4.1.20

Samba Samba=4.1.21

Samba Samba=4.1.22

Samba Samba=4.1.23

Samba Samba=4.2.0-rc1

Samba Samba=4.2.0-rc2

Samba Samba=4.2.0-rc3

Samba Samba=4.2.0-rc4

Samba Samba=4.2.1

Samba Samba=4.2.2

Samba Samba=4.2.3

Samba Samba=4.2.4

Samba Samba=4.2.5

Samba Samba=4.2.6

Samba Samba=4.2.7

Samba Samba=4.2.8

Samba Samba=4.2.9

Samba Samba=4.3.0

Samba Samba=4.3.1

Samba Samba=4.3.2

Samba Samba=4.3.3

Samba Samba=4.3.4

Samba Samba=4.3.5

Samba Samba=4.3.6

Samba Samba=4.4.0

Canonical Ubuntu Linux=14.04

Canonical Ubuntu Linux=15.10

Canonical Ubuntu Linux=16.04

Remediation

Patch Available

https://www.samba.org/samba/security/CVE-2016-2111.html

Event History

Apr 25, 2016

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-2111?

CVE-2016-2111 is categorized as a high-severity vulnerability due to its potential for unauthorized access to sensitive session information.

How do I fix CVE-2016-2111?

To fix CVE-2016-2111, upgrade your Samba installation to versions 4.2.11, 4.3.8, or 4.4.2 and above.

What software is affected by CVE-2016-2111?

CVE-2016-2111 affects Samba 3.x and 4.x versions before 4.2.11, 4.3.8, and 4.4.2.

What types of attacks can exploit CVE-2016-2111?

CVE-2016-2111 can be exploited by remote attackers to spoof computer names and gain access to sensitive session data.

Is there a workaround for CVE-2016-2111?

There is no official workaround for CVE-2016-2111; upgrading to the patched versions is strongly advised.