Lucene search

K
f5F5F5:K03644631
HistoryApr 11, 2017 - 12:00 a.m.

K03644631 : Samba vulnerability CVE-2016-2126

2017-04-1100:00:00
my.f5.com
29

AI Score

6.5

Confidence

High

EPSS

0.004

Percentile

75.0%

Security Advisory Description

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions. (CVE-2016-2126)
Impact
There is no impact; F5 products are not affected by this vulnerability.