SOL53313971 - Samba vulnerabilities CVE-2016-2110 and CVE-2016-2115

Vulnerability Recommended Actions

If you are running a version listed in the Versions known to be vulnerable column, you can eliminate this vulnerability by upgrading to a version listed in theVersions known to be not vulnerable column. If the table lists only an older version than what you are currently running, or does not list a non-vulnerable version, then no upgrade candidate currently exists.

To mitigate this vulnerability, you can avoid using any Samba tools included with the BIG-IP system. Though Samba tools are included with the BIG-IP Linux distribution, using a BIG-IP system as a Samba server is not supported. If your system uses an external shell script with Samba tools from within a custom monitor, you can use alternative monitoring methods.

Impact of action: Performing the suggested action should not have a negative impact on your system.

Supplemental Information

• SOL9970: Subscribing to email notifications regarding F5 products
• SOL9957: Creating a custom RSS feed to view new and updated documents
• SOL4602: Overview of the F5 security vulnerability response policy
• SOL4918: Overview of the F5 critical issue hotfix policy