CVE-2016-2114: Medium severity samba vulnerability
Published Apr 25, 2016
·Updated
The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "server signing = mandatory" setting, which allows man-in-the-middle attackers to spoof SMB servers by modifying the client-server data stream.
Affected Software
75 affected components
Samba Samba=4.0.0
Samba Samba=4.0.1
Samba Samba=4.0.2
Samba Samba=4.0.3
Samba Samba=4.0.4
Samba Samba=4.0.5
Samba Samba=4.0.6
Samba Samba=4.0.7
Samba Samba=4.0.8
Samba Samba=4.0.9
Samba Samba=4.0.10
Samba Samba=4.0.11
Samba Samba=4.0.12
Samba Samba=4.0.13
Samba Samba=4.0.14
Samba Samba=4.0.15
Samba Samba=4.0.16
Samba Samba=4.0.17
Samba Samba=4.0.18
Samba Samba=4.0.19
Samba Samba=4.0.20
Samba Samba=4.0.21
Samba Samba=4.0.22
Samba Samba=4.0.23
Samba Samba=4.0.24
Samba Samba=4.0.25
Samba Samba=4.0.26
Samba Samba=4.1.0
Samba Samba=4.1.1
Samba Samba=4.1.2
Samba Samba=4.1.3
Samba Samba=4.1.4
Samba Samba=4.1.5
Samba Samba=4.1.6
Samba Samba=4.1.7
Samba Samba=4.1.8
Samba Samba=4.1.9
Samba Samba=4.1.10
Samba Samba=4.1.11
Samba Samba=4.1.12
Samba Samba=4.1.13
Samba Samba=4.1.14
Samba Samba=4.1.15
Samba Samba=4.1.16
Samba Samba=4.1.17
Samba Samba=4.1.18
Samba Samba=4.1.19
Samba Samba=4.1.20
Samba Samba=4.1.21
Samba Samba=4.1.22
Samba Samba=4.1.23
Samba Samba=4.2.0-rc1
Samba Samba=4.2.0-rc2
Samba Samba=4.2.0-rc3
Samba Samba=4.2.0-rc4
Samba Samba=4.2.1
Samba Samba=4.2.2
Samba Samba=4.2.3
Samba Samba=4.2.4
Samba Samba=4.2.5
Samba Samba=4.2.6
Samba Samba=4.2.7
Samba Samba=4.2.8
Samba Samba=4.2.9
Samba Samba=4.3.0
Samba Samba=4.3.1
Samba Samba=4.3.2
Samba Samba=4.3.3
Samba Samba=4.3.4
Samba Samba=4.3.5
Samba Samba=4.3.6
Samba Samba=4.4.0
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.10
Canonical Ubuntu Linux=16.04
Remediation
Patch Available
Event History
Apr 25, 2016
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2114?
CVE-2016-2114 is considered a high severity vulnerability due to potential man-in-the-middle attacks.
2
How do I fix CVE-2016-2114?
To fix CVE-2016-2114, upgrade Samba to version 4.2.11, 4.3.8, or 4.4.2 or later.
3
What versions of Samba are affected by CVE-2016-2114?
Samba versions 4.0.0 through 4.4.1 are affected by CVE-2016-2114.
4
What kind of attack can exploit CVE-2016-2114?
CVE-2016-2114 can be exploited through man-in-the-middle attacks which allow an attacker to spoof SMB servers.
5
Is it safe to use Samba versions prior to 4.2.11, 4.3.8, or 4.4.2 after CVE-2016-2114?
No, using Samba versions prior to the mentioned updates is not safe due to the vulnerabilities exposed by CVE-2016-2114.