Medium severity5.9NVD Advisory· Published Feb 18, 2022· Updated Jun 17, 2026

CVE-2016-2124

Description

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Samba (software)/Samballm-fuzzy3 versions
(expand)+ 2 more
- (no CPE)
- (no CPE)
- cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*range: >=3.0.0,<4.13.14
osv-coords47 versions
pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP5 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%202%2015%20SP3 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP3 pkg:rpm/suse/ldb&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/samba&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/samba&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208 pkg:rpm/suse/samba&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP3 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP4 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSS pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/ldb&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/opensuse/samba&distro=openSUSE%20Tumbleweed pkg:rpm/almalinux/libsmbclient-devel pkg:rpm/almalinux/libwbclient-devel pkg:rpm/almalinux/samba-devel pkg:rpm/almalinux/samba-vfs-iouring pkg:rpm/suse/samba&distro=HPE%20Helion%20OpenStack%208 pkg:rpm/suse/samba&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/ldb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP2 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/samba&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Python%202%2015%20SP2 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/opensuse/ldb&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/samba&distro=openSUSE%20Leap%2015.3 pkg:rpm/suse/samba&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2015%20SP1 pkg:rpm/suse/samba&distro=SUSE%20OpenStack%20Cloud%208 pkg:rpm/opensuse/samba&distro=openSUSE%20Leap%2015.2
< 4.10.18+git.339.c912385a5e1-3.41.1+ 46 more
- (no CPE)range: < 4.10.18+git.339.c912385a5e1-3.41.1
- (no CPE)range: < 4.13.13+git.528.140935f8d6a-3.12.1
- (no CPE)range: < 4.13.13+git.528.140935f8d6a-3.12.1
- (no CPE)range: < 4.13.13+git.528.140935f8d6a-3.12.1
- (no CPE)range: < 2.2.2-3.3.1
- (no CPE)range: < 4.10.18+git.339.c912385a5e1-3.41.1
- (no CPE)range: < 4.10.18+git.339.c912385a5e1-3.41.1
- (no CPE)range: < 4.10.18+git.339.c912385a5e1-3.41.1
- (no CPE)range: < 4.9.5+git.471.5edbe3dcae7-3.57.2
- (no CPE)range: < 4.9.5+git.471.5edbe3dcae7-3.57.2
- (no CPE)range: < 4.9.5+git.471.5edbe3dcae7-3.57.2
- (no CPE)range: < 4.9.5+git.471.5edbe3dcae7-3.57.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.7.11+git.352.41e30c5a0f7-4.57.1
- (no CPE)range: < 4.7.11+git.352.41e30c5a0f7-4.57.1
- (no CPE)range: < 2.2.2-4.6.1
- (no CPE)range: < 4.15.2+git.193.a4d6307f1fd-1.1
- (no CPE)range: < 4.14.5-7.el8_5
- (no CPE)range: < 4.14.5-7.el8_5
- (no CPE)range: < 4.14.5-7.el8_5
- (no CPE)range: < 4.14.5-7.el8_5
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.9.5+git.471.5edbe3dcae7-3.57.2
- (no CPE)range: < 2.2.2-3.3.1
- (no CPE)range: < 4.11.14+git.308.666c63d4eea-4.28.1
- (no CPE)range: < 4.4.2-38.45.2
- (no CPE)range: < 4.9.5+git.471.5edbe3dcae7-3.57.2
- (no CPE)range: < 4.7.11+git.352.41e30c5a0f7-4.57.1
- (no CPE)range: < 4.7.11+git.352.41e30c5a0f7-4.57.1
- (no CPE)range: < 4.13.13+git.545.5897c2d94f3-3.12.1
- (no CPE)range: < 4.11.14+git.308.666c63d4eea-4.28.1
- (no CPE)range: < 4.11.14+git.308.666c63d4eea-4.28.1
- (no CPE)range: < 4.7.11+git.352.41e30c5a0f7-4.57.1
- (no CPE)range: < 2.2.2-3.3.1
- (no CPE)range: < 4.13.13+git.528.140935f8d6a-3.12.1
- (no CPE)range: < 4.9.5+git.471.5edbe3dcae7-3.57.2
- (no CPE)range: < 4.6.16+git.307.b3899d08cc6-3.64.2
- (no CPE)range: < 4.11.14+git.308.666c63d4eea-lp152.3.28.1
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Fedoraproject/Fedora3 versions
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Red Hat/Codeready Linux Builder For X86 64
cpe:2.3:a:redhat:codeready_linux_builder:-:*:*:*:*:*:*:*
Red Hat/Gluster Storage2 versions
cpe:2.3:a:redhat:gluster_storage:3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:gluster_storage:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:gluster_storage:3.5:*:*:*:*:*:*:*
Red Hat/Openstack3 versions
cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openstack:16.2:*:*:*:*:*:*:*
Red Hat/Virtualization Host
cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server4 versions
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_tus:8.2:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Desktop
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Eus2 versions
cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_eus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems2 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems Eus2 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Big Endian
cpe:2.3:o:redhat:enterprise_linux_for_power_big_endian:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian2 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian Eus2 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Scientific Computing
cpe:2.3:o:redhat:enterprise_linux_for_scientific_computing:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Resilient Storage
cpe:2.3:o:redhat:enterprise_linux_resilient_storage:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Aus2 versions
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Tus
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Update Services For Sap Solutions2 versions
cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Workstation
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Canonical/Ubuntu Linux4 versions
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:21.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000

CVE-2016-2124

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions