Skip to content
OpenAdvisories
Unscored RHSA-2016:0618 8 CVEs

Red Hat Security Advisory: samba security, bug fix, and enhancement update

Published Sep 22, 2024 · Updated Jun 27, 2026

Fixed packages 112

ReleasePackageFixed in
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode ipa 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode ipa-admintools 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode ipa-client 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode ipa-debuginfo 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode ipa-python 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode ipa-server 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode ipa-server-trust-ad 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode ldb-tools 0:1.1.25-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libldb 0:1.1.25-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libldb-debuginfo 0:1.1.25-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libldb-devel 0:1.1.25-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libsmbclient 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libsmbclient-devel 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libtalloc 0:2.1.5-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libtalloc-debuginfo 0:2.1.5-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libtalloc-devel 0:2.1.5-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libtdb 0:1.3.8-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libtdb-debuginfo 0:1.3.8-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libtdb-devel 0:1.3.8-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libtevent 0:0.9.26-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libtevent-debuginfo 0:0.9.26-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libtevent-devel 0:0.9.26-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libwbclient 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode libwbclient-devel 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode pyldb 0:1.1.25-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode pyldb-devel 0:1.1.25-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode pytalloc 0:2.1.5-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode pytalloc-devel 0:2.1.5-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode python-tdb 0:1.3.8-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode python-tevent 0:0.9.26-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-client 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-client-libs 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-common 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-common-libs 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-common-tools 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-dc 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-dc-libs 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-debuginfo 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-devel 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-libs 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-pidl 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-python 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-test 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-test-devel 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-test-libs 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-vfs-glusterfs 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-winbind 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-winbind-clients 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-winbind-krb5-locator 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode samba-winbind-modules 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::computenode tdb-tools 0:1.3.8-1.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ctdb 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ctdb-devel 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ctdb-tests 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ipa 0:4.1.0-18.ael7b_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ipa-admintools 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ipa-client 0:4.1.0-18.ael7b_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ipa-debuginfo 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ipa-python 0:4.1.0-18.ael7b_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ipa-server 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ipa-server-trust-ad 0:4.1.0-18.el7_1.6
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server ldb-tools 0:1.1.25-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libldb 0:1.1.25-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libldb-debuginfo 0:1.1.25-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libldb-devel 0:1.1.25-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libsmbclient 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libsmbclient-devel 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libtalloc 0:2.1.5-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libtalloc-debuginfo 0:2.1.5-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libtalloc-devel 0:2.1.5-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libtdb 0:1.3.8-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libtdb-debuginfo 0:1.3.8-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libtdb-devel 0:1.3.8-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libtevent 0:0.9.26-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libtevent-debuginfo 0:0.9.26-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libtevent-devel 0:0.9.26-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libwbclient 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server libwbclient-devel 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server openchange 0:2.0-4.ael7b_1.1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server openchange-client 0:2.0-4.ael7b_1.1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server openchange-debuginfo 0:2.0-4.ael7b_1.1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server openchange-devel 0:2.0-4.ael7b_1.1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server openchange-devel-docs 0:2.0-4.ael7b_1.1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server pyldb 0:1.1.25-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server pyldb-devel 0:1.1.25-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server pytalloc 0:2.1.5-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server pytalloc-devel 0:2.1.5-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server python-tdb 0:1.3.8-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server python-tevent 0:0.9.26-1.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-client 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-client-libs 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-common 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-common-libs 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-common-tools 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-dc 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-dc-libs 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-debuginfo 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-devel 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-libs 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-pidl 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-python 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-test 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-test-devel 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-test-libs 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-vfs-glusterfs 0:4.2.10-5.el7_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-winbind 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-winbind-clients 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-winbind-krb5-locator 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server samba-winbind-modules 0:4.2.10-5.ael7b_1
Red Hat · RHEL 7.1 EUS rhel_eus:7.1::server tdb-tools 0:1.3.8-1.ael7b_1

Vulnerabilities 8

  • Unscored —
    CVE-2015-5370 EPSS 19%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC lay…

  • Unscored —

    The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.…

  • Unscored —

    The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain cont…

  • Unscored —

    The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not…

  • Unscored —

    Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not verify X.509 certificates from TLS servers…

  • Unscored —

    The SMB1 protocol implementation in Samba 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recogn…

  • Unscored —
    CVE-2016-2115 EPSS 10%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERP…

  • Unscored —
    CVE-2016-2118 Public exploit EPSS 37%

    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x befo…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://www.samba.org/samba/history/samba-4.2.10.html
  • article
    https://access.redhat.com/security/vulnerabilities/badlock
  • article
    https://access.redhat.com/articles/2253041
  • article
    http://badlock.org/
  • article
    https://access.redhat.com/articles/2243351
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1309987
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311902
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311903
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311910
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1312082
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1312084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1317990
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0618.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5370
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5370
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5370
  • report
    https://access.redhat.com/security/cve/CVE-2016-2110
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2110
  • report
    https://access.redhat.com/security/cve/CVE-2016-2111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2111
  • report
    https://access.redhat.com/security/cve/CVE-2016-2112
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2112
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2112
  • report
    https://access.redhat.com/security/cve/CVE-2016-2113
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2113
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2113
  • report
    https://access.redhat.com/security/cve/CVE-2016-2114
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2114
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2114
  • report
    https://access.redhat.com/security/cve/CVE-2016-2115
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2115
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2115
  • report
    https://access.redhat.com/security/cve/CVE-2016-2118
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2118
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2118