Skip to content
OpenAdvisories
Unscored RHSA-2016:0619 6 CVEs

Red Hat Security Advisory: samba security update

Published Sep 22, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 67

ReleasePackageFixed in
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server libsmbclient 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server libsmbclient-devel 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-client 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-common 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-debuginfo 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-doc 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-domainjoin-gui 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-swat 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-winbind 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-winbind-clients 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-winbind-devel 0:3.6.23-30.el6_4
Red Hat · RHEL 6.4 AUS rhel_aus:6.4::server samba-winbind-krb5-locator 0:3.6.23-30.el6_4
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server libsmbclient 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server libsmbclient-devel 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-client 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-common 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-debuginfo 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-doc 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-domainjoin-gui 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-swat 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-winbind 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-winbind-clients 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-winbind-devel 0:3.6.23-30.el6_5
Red Hat · RHEL 6.5 AUS rhel_aus:6.5::server samba-winbind-krb5-locator 0:3.6.23-30.el6_5
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode libsmbclient 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode libsmbclient-devel 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-client 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-common 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-debuginfo 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-doc 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-domainjoin-gui 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-glusterfs 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-swat 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-winbind 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-winbind-clients 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-winbind-devel 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::computenode samba-winbind-krb5-locator 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server libsmbclient 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server libsmbclient-devel 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-client 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-common 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-debuginfo 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-doc 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-domainjoin-gui 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-glusterfs 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-swat 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-winbind 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-winbind-clients 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-winbind-devel 0:3.6.23-30.el6_6
Red Hat · RHEL 6.6 EUS rhel_eus:6.6::server samba-winbind-krb5-locator 0:3.6.23-30.el6_6
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server libsmbclient 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server libsmbclient-devel 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-client 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-common 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-debuginfo 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-doc 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-domainjoin-gui 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-swat 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-winbind 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-winbind-clients 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-winbind-devel 0:3.6.23-30.el6_2
Red Hat · Rhel Mission Critical 6 rhel_mission_critical:6.2::server samba-winbind-krb5-locator 0:3.6.23-30.el6_2

Vulnerabilities 6

  • Unscored —
    CVE-2015-5370 EPSS 19%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC lay…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2110

    The NTLMSSP authentication implementation in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.…

    samba samba samba Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2016-2111

    The NETLOGON service in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2, when a domain cont…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2112

    The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2115 EPSS 10%

    Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not require SMB signing within a DCERP…

    samba samba Debian Ubuntu
  • Unscored —
    CVE-2016-2118 Public exploit EPSS 37%

    The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x befo…

    samba samba Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • article
    https://access.redhat.com/security/vulnerabilities/badlock
  • article
    https://access.redhat.com/articles/2253041
  • article
    http://badlock.org/
  • article
    https://access.redhat.com/articles/2243351
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1309987
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311902
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1311903
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1312084
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1317990
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0619.json
  • report
    https://access.redhat.com/security/cve/CVE-2015-5370
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2015-5370
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2015-5370
  • report
    https://access.redhat.com/security/cve/CVE-2016-2110
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2110
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2110
  • report
    https://access.redhat.com/security/cve/CVE-2016-2111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2111
  • report
    https://access.redhat.com/security/cve/CVE-2016-2112
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2112
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2112
  • report
    https://access.redhat.com/security/cve/CVE-2016-2115
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2115
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2115
  • report
    https://access.redhat.com/security/cve/CVE-2016-2118
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2016-2118
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2016-2118