Lucene search
F5F5:K13364192HistoryOct 11, 2016 - 12:00 a.m.
K13364192 : Samba vulnerability CVE-2016-2119
2016-10-1100:00:00
my.f5.com
29
Security Advisory Description
libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5 allows man-in-the-middle attackers to bypass a client-signing protection mechanism, and consequently spoof SMB2 and SMB3 servers, via the (1) SMB2_SESSION_FLAG_IS_GUEST or (2) SMB2_SESSION_FLAG_IS_NULL flag. (CVE-2016-2119)
Impact
There is no impact; F5 products are not affected by this vulnerability.
Related
openvas
openvas
RedHat Update for samba4 RHSA-2016:1487-01
2016-08-02 00:00:00
Fedora Update for samba FEDORA-2016-0acec022f4
2016-08-02 00:00:00
Slackware: Security Advisory (SSA:2016-189-01)
2022-04-21 00:00:00
prion
prion
Design/Logic Flaw
2016-07-07 15:59:00
altlinux
altlinux
Security fix for the ALT Linux 8 package samba version 4.4.5-alt1
2016-07-10 00:00:00
Security fix for the ALT Linux 10 package samba version 4.4.5-alt1
2016-07-08 00:00:00
Security fix for the ALT Linux 7 package samba version 4.4.5-alt1
2016-07-10 00:00:00
redhatcve
redhatcve
CVE-2016-2119
2016-07-07 10:48:53
debiancve
debiancve
CVE-2016-2119
2016-07-07 15:59:00
redhat
redhat
(RHSA-2016:1486) Moderate: samba security and bug fix update
2016-07-26 05:06:35
(RHSA-2016:1487) Moderate: samba4 security update
2016-07-26 05:06:37
(RHSA-2016:1494) Moderate: samba security update
2016-07-26 11:44:33
centos
centos
samba4 security update
2016-07-26 11:29:16
ctdb, libsmbclient, libwbclient, samba security update
2016-07-26 11:26:50
nessus
nessus
Oracle Linux 7 : samba (ELSA-2016-1486)
2016-07-27 00:00:00
Samba 4.x < 4.2.14 / 4.3.x < 4.3.11 / 4.4.x < 4.4.5 SMB2/3 Client Connection Required Signing Downgrade
2016-07-20 00:00:00
SUSE SLES12 Security Update : samba (SUSE-SU-2016:2570-1)
2016-10-26 00:00:00
ubuntu
ubuntu
Samba vulnerability
2016-09-28 00:00:00
f5
f5
SOL13364192 - samba vulnerability CVE-2016-2119
2016-10-11 00:00:00
amazon
amazon
Medium: samba
2016-08-17 13:30:00
nvd
nvd
CVE-2016-2119
2016-07-07 15:59:00
samba
samba
Client side SMB2/3 required signing can be downgraded
2016-07-07 00:00:00
veracode
veracode
Man-in-the-Middle (MitM)
2019-01-15 09:12:19
ibm
ibm
oraclelinux
oraclelinux
samba4 security update
2016-07-26 00:00:00
samba security and bug fix update
2016-07-26 00:00:00
slackware
slackware
[slackware-security] samba
2016-07-07 19:54:48
freebsd
freebsd
samba -- client side SMB2/3 required signing can be downgraded
2016-07-07 00:00:00
cve
cve
CVE-2016-2119
2016-07-07 15:59:00
ubuntucve
ubuntucve
CVE-2016-2119
2016-07-07 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: samba-4.3.11-1.fc23
2016-07-15 10:24:43
[SECURITY] Fedora 24 Update: samba-4.4.5-1.fc24
2016-07-12 15:10:30
cvelist
cvelist
CVE-2016-2119
2016-07-07 15:00:00
debian
debian
[SECURITY] [DSA 3740-1] samba security update
2016-12-19 10:16:48
[SECURITY] [DSA 3740-1] samba security update
2016-12-19 10:16:48
osv
osv
samba - security update
2016-12-19 00:00:00
ctdb-4.5.0-1.1 on GA media
2024-06-15 00:00:00
gentoo
gentoo
Samba: Multiple vulnerabilities
2018-05-22 00:00:00