Skip to content
OpenAdvisories
Unscored RHSA-2016:0613 6 CVEs

Red Hat Security Advisory: samba3x security update

Published Sep 22, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client samba3x 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-client 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-common 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-debuginfo 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-doc 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-domainjoin-gui 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-swat 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client samba3x-winbind 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation samba3x 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation samba3x-debuginfo 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::client_workstation samba3x-winbind-devel 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server samba3x 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-client 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-common 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-debuginfo 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-doc 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-domainjoin-gui 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-swat 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-winbind 0:3.6.23-12.el5_11
Red Hat · RHEL 5 enterprise_linux:5::server samba3x-winbind-devel 0:3.6.23-12.el5_11

Vulnerabilities 6

  • Unscored —
    CVE-2015-5370 EPSS 19%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC lay…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2110

    The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.…

    samba samba samba Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2016-2111

    The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain cont…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2112

    The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2115 EPSS 10%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERP…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2118 Public exploit EPSS 37%

    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x befo…

    samba samba Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/security/vulnerabilities/badlock
  • article
    https://access.redhat.com/articles/2253041
  • article
    http://badlock.org/
  • article
    https://access.redhat.com/articles/2243351
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1309987
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311902
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311903
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1312084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1317990
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0613.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5370
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5370
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5370
  • report
    https://access.redhat.com/security/cve/CVE-2016-2110
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2110
  • report
    https://access.redhat.com/security/cve/CVE-2016-2111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2111
  • report
    https://access.redhat.com/security/cve/CVE-2016-2112
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2112
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2112
  • report
    https://access.redhat.com/security/cve/CVE-2016-2115
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2115
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2115
  • report
    https://access.redhat.com/security/cve/CVE-2016-2118
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2118
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2118