This update for samba provides the following fix: Following security issue was fixed :

  - CVE-2016-2119: Prevent client-side SMB2 signing     downgrade. (bsc#986869) Also the following bugs were     fixed :

  - Fix possible ctdb crash when opening sockets with     htons(IPPROTO_RAW). (bsc#969522)

  - Honor smb.conf socket options in winbind. (bsc#975131)

  - Fix ntlm-auth segmentation fault with squid.
    (bsc#986228)

  - Implement new '--no-dns-updates' option in 'net ads'     command. (bsc#991564)

  - Fix population of ctdb sysconfig after source merge.
    (bsc#981566)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1637 advisory.

    This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.6. It addresses 97 CVEs:
    CVE-2018-1050, CVE-2020-10760, CVE-2013-4475, CVE-2020-10730, CVE-2018-16857, and 92 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1613 advisory.

    This advisory aggregates security fixes for the samba SRPM in CIQ LTS 9.2. It addresses 88 CVEs:
    CVE-2018-1050, CVE-2020-10760, CVE-2013-4475, CVE-2020-10730, CVE-2018-16857, and 83 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix. The Common Vulnerabilities and Exposures project identifies the following issues :

  - CVE-2016-2119     Stefan Metzmacher discovered that client-side SMB2/3     required signing can be downgraded, allowing a     man-in-the-middle attacker to impersonate a server being     connected to by Samba, and return malicious results.

  - CVE-2016-2123     Trend Micro's Zero Day Initiative and Frederic Besler     discovered that the routine ndr_pull_dnsp_name, used to     parse data from the Samba Active Directory ldb database,     contains an integer overflow flaw, leading to an     attacker-controlled memory overwrite. An authenticated     user can take advantage of this flaw for remote     privilege escalation.

  - CVE-2016-2125     Simo Sorce of Red Hat discovered that the Samba client     code always requests a forwardable ticket when using     Kerberos authentication. A target server, which must be     in the current or trusted domain/realm, is given a valid     general purpose Kerberos 'Ticket Granting Ticket' (TGT),     which can be used to fully impersonate the authenticated     user or service.

  - CVE-2016-2126     Volker Lendecke discovered several flaws in the Kerberos     PAC validation. A remote, authenticated, attacker can     cause the winbindd process to crash using a legitimate     Kerberos ticket due to incorrect handling of the PAC     checksum. A local service with access to the winbindd     privileged pipe can cause winbindd to cache elevated     access permissions.

This update for samba provides the following fixes :

  - CVE-2016-2119: Prevent client-side SMB2 signing     downgrade. (bsc#986869)

  - Fix possible ctdb crash when opening sockets with     htons(IPPROTO_RAW). (bsc#969522)

  - Honor smb.conf socket options in winbind. (bsc#975131)

  - Fix ntlm-auth segmentation fault with squid.
    (bsc#986228)

  - Implement new '--no-dns-updates' option in 'net ads'     command. (bsc#991564)

  - Fix population of ctdb sysconfig after source merge.
    (bsc#981566)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Samba team reports :

A man in the middle attack can disable client signing over SMB2/3, even if enforced by configuration parameters.

This update for samba fixes the following issues :

  - Prevent client-side SMB2 signing downgrade;
    CVE-2016-2119; (bso#11860); (boo#986869).

  - Honor smb.conf socket options in winbind; (boo#975131).

  - Don't use htons() with IP_PROTO_RAW; (bso#11705);
    (boo#969522).

The version of Samba running on the remote host is 4.x prior to 4.2.14, 4.3.x prior to 4.3.11, or 4.4.x prior to 4.4.5. It is, therefore, affected by a flaw in libcli/smb/smbXcli_base.c that is triggered when handling SMB2 and SMB3 client connections. A man-in-the-middle attacker can exploit this, by injecting the SMB2_SESSION_FLAG_IS_GUEST or SMB2_SESSION_FLAG_IS_NULL flags, to downgrade the required signing for a client connection, allowing the attacker to spoof SMB2 and SMB3 servers.

An update for samba is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Samba is an open source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es) :

* A flaw was found in the way Samba initiated signed DCE/RPC connections. A man-in-the-middle attacker could use this flaw to downgrade the connection to not use signing and therefore impersonate the server. (CVE-2016-2119)

Red Hat would like to thank the Samba project for reporting this issue. Upstream acknowledges Stefan Metzmacher as the original reporter.

Bug Fix(es) :

* Previously, the 'net' command in some cases failed to join the client to Active Directory (AD) because the permissions setting prevented modification of the supported Kerberos encryption type LDAP attribute. With this update, Samba has been fixed to allow joining an AD domain as a user. In addition, Samba now uses the machine account credentials to set up the Kerberos encryption types within AD for the joined machine. As a result, using 'net' to join a domain now works more reliably. (BZ#1351260)

* Previously, the idmap_hash module worked incorrectly when it was used together with other modules. As a consequence, user and group IDs were not mapped properly. A patch has been applied to skip already configured modules. Now, the hash module can be used as the default idmap configuration back end and IDs are resolved correctly.
(BZ#1350759)

ID	Name	Product	Family	Published	Updated	Severity
94274	SUSE SLES12 Security Update : samba (SUSE-SU-2016:2570-1)	Nessus	SuSE Local Security Checks	10/26/2016	1/21/2026	high
364609	Rocky Linux 9.6 [CIQ] Security Update: ldb-tools / libldb / libldb-devel / libnetapi / libnetapi-devel / etc Multiple Vulnerabilities (ciqsa-2026_1637)	Nessus	Rocky Linux Local Security Checks	10/12/2026	10/13/2026	critical
364622	Rocky Linux 9.2 [CIQ] Security Update: ctdb / libnetapi / libnetapi-devel / libsmbclient / etc Multiple Vulnerabilities (ciqsa-2026_1613)	Nessus	Rocky Linux Local Security Checks	10/12/2026	10/13/2026	critical
95936	Debian DSA-3740-1 : samba - security update	Nessus	Debian Local Security Checks	12/20/2016	1/8/2026	high
93508	SUSE SLED12 / SLES12 Security Update : samba (SUSE-SU-2016:2306-1)	Nessus	SuSE Local Security Checks	9/15/2016	1/23/2026	high
92027	FreeBSD : samba -- client side SMB2/3 required signing can be downgraded (4729c849-4897-11e6-b704-000c292e4fd8)	Nessus	FreeBSD Local Security Checks	7/13/2016	1/4/2021	high
92450	openSUSE Security Update : samba (openSUSE-2016-881)	Nessus	SuSE Local Security Checks	7/20/2016	1/30/2026	high
92466	Samba 4.x < 4.2.14 / 4.3.x < 4.3.11 / 4.4.x < 4.4.5 SMB2/3 Client Connection Required Signing Downgrade	Nessus	Misc.	7/20/2016	11/19/2019	high
92579	RHEL 7 : samba (RHSA-2016:1486)	Nessus	Red Hat Local Security Checks	7/27/2016	1/30/2026	high

Detections

Analytics

Plugins Search

high

critical

critical

high

high

high

high

high

high