CVE-2016-2112 json
The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "clie…
published 2016-04-25 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-3215
- cvss
- 5.9
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 9.4%
- EPSS 9.4% chance of exploitation in 30 days, percentile 95%
- public exploits
- 0
- none known
Summary
The bundled LDAP client library in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not recognize the "client ldap sasl wrapping" setting, which allows man-in-the-middle attackers to perform LDAP protocol-downgrade attacks by modifying the client-server data stream.
Patch / fix
- samba Debian 14, Debian 13, Debian 12 2:4.3.7+dfsg-1
debian advisories DEBIAN-CVE-2016-2112
- samba Ubuntu 14.04 LTS 2:4.3.8+dfsg-0ubuntu0.14.04.2
- samba Ubuntu 16.04 LTS 2:4.3.8+dfsg-0ubuntu1
ubuntu advisories UBUNTU-CVE-2016-2112
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- samba storage 3.1 4.2.11-2.el6rhs
- samba storage 3.1 4.2.11-2.el7rhgs
- ctdb storage 3.1 4.2.11-2.el6rhs
- ctdb storage 3.1 4.2.11-2.el7rhgs
- pyldb storage 3.1 1.1.24-1.el6rhs
- pyldb storage 3.1 1.1.24-1.el7rhgs
- libldb storage 3.1 1.1.24-1.el6rhs
- libldb storage 3.1 1.1.24-1.el7rhgs
red hat advisories RHSA-2016:0624RHSA-2016:0619RHSA-2016:0620RHSA-2016:0618RHSA-2016:0614RHSA-2016:0613
- samba SLES for SAP 12, SLES 12, SLED 12 +2 more 4.2.4-18.17.1
- samba SLES for SAP 12 SP1, SLES 12 SP1, SLED 12 SP1 +2 more 4.2.4-16.1
- samba SLES for SAP 11 SP4, SLES 11 SP4, SLES 11 SP3-TERADATA +6 more 3.6.3-76.1
- samba SLES 11 SP2-LTSS 3.6.3-52.1
suse advisories SUSE-SU-2016:1028-1SUSE-SU-2016:1022-1SUSE-SU-2016:1024-1SUSE-SU-2016:1023-1
- samba openSUSE Tumbleweed 4.5.0-1.1
opensuse advisories openSUSE-SU-2024:10069-1
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2016-2112 updated cvss 5.8
samba: Missing downgrade detection
-
Red Hat Enterprise Linux (v. 5 server) samba3x 3.6.23-12.el5_11, samba3x-swat 3.6.23-12.el5_11, samba3x-client 3.6.23-12.el5_11, samba3x-common 3.6.23-12.el5_11, samba3x-winbind 3.6.23-12.el5_11, samba3x-domainjoin-gui 3.6.23-12.el5_11fixed: vendor fix RHSA-2016:0613
-
Red Hat Enterprise Linux Client (v. 7) libtdb 1.3.8-1.el7_2, samba 4.2.10-6.el7_2, libldb 1.1.25-1.el7_2, ipa 4.2.0-15.el7_2.6.1, pytalloc 2.1.5-1.el7_2, libtalloc 2.1.5-1.el7_2, +15 more Red Hat Enterprise Linux Client Optional (v. 7) pyldb 1.1.25-1.el7_2, samba 4.2.10-6.el7_2, samba-dc 4.2.10-6.el7_2, tdb-tools 1.3.8-1.el7_2, ldb-tools 1.1.25-1.el7_2, python-tdb 1.3.8-1.el7_2, +13 more Red Hat Enterprise Linux ComputeNode (v. 7) libtdb 1.3.8-1.el7_2, samba 4.2.10-6.el7_2, libldb 1.1.25-1.el7_2, ipa 4.2.0-15.el7_2.6.1, pytalloc 2.1.5-1.el7_2, libtalloc 2.1.5-1.el7_2, +14 morefixed: vendor fix RHSA-2016:0612
-
Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) ipa 4.1.0-18.el7_1.6, libtdb 1.3.8-1.el7_1, samba 4.2.10-5.el7_1, libldb 1.1.25-1.el7_1, pytalloc 2.1.5-1.el7_1, libtalloc 2.1.5-1.el7_1, +14 morefixed: vendor fix RHSA-2016:0618
-
Red Hat Enterprise Linux ComputeNode Optional (v. 7) pyldb 1.1.25-1.el7_2, samba 4.2.10-6.el7_2, samba-dc 4.2.10-6.el7_2, tdb-tools 1.3.8-1.el7_2, ldb-tools 1.1.25-1.el7_2, python-tdb 1.3.8-1.el7_2, +12 morefixed: vendor fix RHSA-2016:0612
-
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) pyldb 1.1.25-1.el7_1, samba 4.2.10-5.el7_1, samba-dc 4.2.10-5.el7_1, tdb-tools 1.3.8-1.el7_1, ldb-tools 1.1.25-1.el7_1, python-tdb 1.3.8-1.el7_1, +11 morefixed: vendor fix RHSA-2016:0618
-
Red Hat Enterprise Linux Desktop (v. 5 client) samba3x 3.6.23-12.el5_11, samba3x-swat 3.6.23-12.el5_11, samba3x-client 3.6.23-12.el5_11, samba3x-common 3.6.23-12.el5_11, samba3x-winbind 3.6.23-12.el5_11, samba3x-domainjoin-gui 3.6.23-12.el5_11fixed: vendor fix RHSA-2016:0613
-
Red Hat Enterprise Linux Desktop (v. 6) ipa 3.0.0-47.el6_7.2, libtdb 1.3.8-1.el6_7, pyldb 1.1.25-2.el6_7, libldb 1.1.25-2.el6_7, samba 3.6.23-30.el6_7, samba4 4.2.10-6.el6_7, +24 more Red Hat Enterprise Linux Desktop Optional (v. 6) samba 3.6.23-30.el6_7, tdb-tools 1.3.8-1.el6_7, ldb-tools 1.1.25-2.el6_7, samba-swat 3.6.23-30.el6_7, ipa-server 3.0.0-47.el6_7.2, openchange-client 1.0-7.el6_7, +6 morefixed: vendor fix RHSA-2016:0612
-
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) samba3x 3.6.23-12.el5_11fixed: vendor fix RHSA-2016:0613
show 15 moreshow fewer
-
Red Hat Enterprise Linux HPC Node (v. 6) ipa 3.0.0-47.el6_7.2, libtdb 1.3.8-1.el6_7, pyldb 1.1.25-2.el6_7, libldb 1.1.25-2.el6_7, samba 3.6.23-30.el6_7, samba4 4.2.10-6.el6_7, +22 morefixed: vendor fix RHSA-2016:0612
-
Red Hat Enterprise Linux HPC Node EUS (v. 6.6) ipa 3.0.0-42.el6_6.1, pyldb 1.1.25-2.el6_6, libldb 1.1.25-2.el6_6, samba 3.6.23-30.el6_6, samba4 4.2.10-6.el6_6, samba4-dc 4.2.10-6.el6_6, +16 morefixed: vendor fix RHSA-2016:0620
-
Red Hat Enterprise Linux HPC Node Optional (v. 6) samba 3.6.23-30.el6_7, tdb-tools 1.3.8-1.el6_7, ldb-tools 1.1.25-2.el6_7, samba-swat 3.6.23-30.el6_7, ipa-server 3.0.0-47.el6_7.2, libsmbclient 3.6.23-30.el6_7, +6 morefixed: vendor fix RHSA-2016:0612
-
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) samba 3.6.23-30.el6_6, ldb-tools 1.1.25-2.el6_6, samba-swat 3.6.23-30.el6_6, ipa-server 3.0.0-42.el6_6.1, libsmbclient 3.6.23-30.el6_6, ipa-admintools 3.0.0-42.el6_6.1, +5 morefixed: vendor fix RHSA-2016:0620
-
Red Hat Enterprise Linux Long Life (v. 5.6 server) samba3x 3.6.23-12.el5_6, samba3x-swat 3.6.23-12.el5_6, samba3x-client 3.6.23-12.el5_6, samba3x-common 3.6.23-12.el5_6, samba3x-winbind 3.6.23-12.el5_6, samba3x-domainjoin-gui 3.6.23-12.el5_6 Red Hat Enterprise Linux Long Life (v. 5.9 server) samba3x 3.6.23-12.el5_9, samba3x-swat 3.6.23-12.el5_9, samba3x-client 3.6.23-12.el5_9, samba3x-common 3.6.23-12.el5_9, samba3x-winbind 3.6.23-12.el5_9, samba3x-domainjoin-gui 3.6.23-12.el5_9fixed: vendor fix RHSA-2016:0624
-
Red Hat Enterprise Linux Server (v. 6) ipa 3.0.0-47.el6_7.2, libtdb 1.3.8-1.el6_7, pyldb 1.1.25-2.el6_7, libldb 1.1.25-2.el6_7, samba 3.6.23-30.el6_7, samba4 4.2.10-6.el6_7, +28 more Red Hat Enterprise Linux Server (v. 7) libtdb 1.3.8-1.el7_2, pyldb 1.1.25-1.el7_2, samba 4.2.10-6.el7_2, libldb 1.1.25-1.el7_2, ipa 4.2.0-15.el7_2.6.1, pytalloc 2.1.5-1.el7_2, +23 morefixed: vendor fix RHSA-2016:0612
-
Red Hat Enterprise Linux Server AUS (v. 6.2) pyldb 1.1.25-2.el6_2, libldb 1.1.25-2.el6_2, samba 3.6.23-30.el6_2, sssd 1.5.1-66.el6_2.5, libipa_hbac 1.5.1-66.el6_2.5, libsmbclient 3.6.23-30.el6_2, +6 more Red Hat Enterprise Linux Server AUS (v. 6.4) ipa 3.0.0-26.el6_4.5, pyldb 1.1.25-2.el6_4, libldb 1.1.25-2.el6_4, samba 3.6.23-30.el6_4, samba4 4.2.10-6.el6_4, sssd 1.9.2-82.12.el6_4, +28 more Red Hat Enterprise Linux Server AUS (v. 6.5) ipa 3.0.0-37.el6_5.1, pyldb 1.1.25-2.el6_5, libldb 1.1.25-2.el6_5, samba 3.6.23-30.el6_5, samba4 4.2.10-6.el6_5, sssd 1.9.2-129.el6_5.7, +28 more Red Hat Enterprise Linux Server EUS (v. 6.6) ipa 3.0.0-42.el6_6.1, pyldb 1.1.25-2.el6_6, libldb 1.1.25-2.el6_6, samba 3.6.23-30.el6_6, samba4 4.2.10-6.el6_6, samba4-dc 4.2.10-6.el6_6, +21 morefixed: vendor fix RHSA-2016:0620
-
Red Hat Enterprise Linux Server EUS (v. 7.1) ipa 4.1.0-18.el7_1.6, libtdb 1.3.8-1.el7_1, pyldb 1.1.25-1.el7_1, samba 4.2.10-5.el7_1, libldb 1.1.25-1.el7_1, ipa 4.1.0-18.ael7b_1.6, +43 morefixed: vendor fix RHSA-2016:0618
-
Red Hat Enterprise Linux Server Optional (v. 6) openchange 1.0-7.el6_7, ldb-tools 1.1.25-2.el6_7, samba-swat 3.6.23-30.el6_7, openchange-client 1.0-7.el6_7, samba-glusterfs 3.6.23-30.el6_7, samba-domainjoin-gui 3.6.23-30.el6_7, +1 more Red Hat Enterprise Linux Server Optional (v. 7) pyldb 1.1.25-1.el7_2, openchange 2.0-10.el7_2, samba-dc 4.2.10-6.el7_2, tdb-tools 1.3.8-1.el7_2, ldb-tools 1.1.25-1.el7_2, python-tdb 1.3.8-1.el7_2, +9 morefixed: vendor fix RHSA-2016:0612
-
Red Hat Enterprise Linux Server Optional AUS (v. 6.2) libldb 1.1.25-2.el6_2, samba 3.6.23-30.el6_2, samba4 4.2.10-6.el6_2, sssd 1.5.1-66.el6_2.5, openchange 1.0-1.el6_2, ldb-tools 1.1.25-2.el6_2, +8 more Red Hat Enterprise Linux Server Optional AUS (v. 6.4) libldb 1.1.25-2.el6_4, samba 3.6.23-30.el6_4, openchange 1.0-5.el6_4, sssd 1.9.2-82.12.el6_4, ldb-tools 1.1.25-2.el6_4, samba-swat 3.6.23-30.el6_4, +4 more Red Hat Enterprise Linux Server Optional AUS (v. 6.5) libldb 1.1.25-2.el6_5, samba 3.6.23-30.el6_5, openchange 1.0-7.el6_5, sssd 1.9.2-129.el6_5.7, ldb-tools 1.1.25-2.el6_5, samba-swat 3.6.23-30.el6_5, +4 more Red Hat Enterprise Linux Server Optional EUS (v. 6.6) openchange 1.0-7.el6_6, ldb-tools 1.1.25-2.el6_6, samba-swat 3.6.23-30.el6_6, openchange-client 1.0-7.el6_6, samba-glusterfs 3.6.23-30.el6_6, samba-domainjoin-gui 3.6.23-30.el6_6, +1 morefixed: vendor fix RHSA-2016:0620
-
Red Hat Enterprise Linux Server Optional EUS (v. 7.1) pyldb 1.1.25-1.el7_1, ctdb 4.2.10-5.ael7b_1, pyldb 1.1.25-1.ael7b_1, samba-dc 4.2.10-5.el7_1, tdb-tools 1.3.8-1.el7_1, ldb-tools 1.1.25-1.el7_1, +26 morefixed: vendor fix RHSA-2016:0618
-
Red Hat Enterprise Linux Server Resilient Storage (v. 7) ctdb 4.2.10-6.el7_2, ctdb-tests 4.2.10-6.el7_2fixed: vendor fix RHSA-2016:0612
-
Red Hat Enterprise Linux Server Resilient Storage EUS (v. 7.1) ctdb 4.2.10-5.el7_1, ctdb-tests 4.2.10-5.el7_1fixed: vendor fix RHSA-2016:0618
-
Red Hat Enterprise Linux Workstation (v. 6) ipa 3.0.0-47.el6_7.2, libtdb 1.3.8-1.el6_7, pyldb 1.1.25-2.el6_7, libldb 1.1.25-2.el6_7, samba 3.6.23-30.el6_7, samba4 4.2.10-6.el6_7, +29 more Red Hat Enterprise Linux Workstation (v. 7) libtdb 1.3.8-1.el7_2, pyldb 1.1.25-1.el7_2, samba 4.2.10-6.el7_2, libldb 1.1.25-1.el7_2, ipa 4.2.0-15.el7_2.6.1, pytalloc 2.1.5-1.el7_2, +23 more Red Hat Enterprise Linux Workstation Optional (v. 6) ldb-tools 1.1.25-2.el6_7, samba-swat 3.6.23-30.el6_7, openchange-client 1.0-7.el6_7, samba-glusterfs 3.6.23-30.el6_7, samba-domainjoin-gui 3.6.23-30.el6_7, samba-winbind-krb5-locator 3.6.23-30.el6_7 Red Hat Enterprise Linux Workstation Optional (v. 7) samba-dc 4.2.10-6.el7_2, tdb-tools 1.3.8-1.el7_2, ldb-tools 1.1.25-1.el7_2, samba-pidl 4.2.10-6.el7_2, samba-test 4.2.10-6.el7_2, samba-dc-libs 4.2.10-6.el7_2, +4 morefixed: vendor fix RHSA-2016:0612
-
Red Hat Gluster 3 Samba on RHEL-6 ctdb 4.2.11-2.el6rhs, libtdb 1.3.8-1.el6rhs, samba 4.2.11-2.el6rhs, pytalloc 2.1.5-1.el6rhs, libtalloc 2.1.5-1.el6rhs, samba-dc 4.2.11-2.el6rhs, +23 more Red Hat Gluster 3 Samba on RHEL-7 ctdb 4.2.11-2.el7rhgs, libtdb 1.3.8-1.el7rhgs, pyldb 1.1.24-1.el7rhgs, samba 4.2.11-2.el7rhgs, libldb 1.1.24-1.el7rhgs, pytalloc 2.1.5-1.el7rhgs, +26 more Red Hat Gluster Storage Server 3.1 on RHEL-6 pyldb 1.1.24-1.el6rhs, libldb 1.1.24-1.el6rhs, ldb-tools 1.1.24-1.el6rhsfixed: vendor fix RHSA-2016:0614
2 more not affected in the full advisory
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
9.42% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 5.9 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Classification
- Weakness
-
- CWE-254 7PK - Security Features
References
-
samba.org
/samba/security/CVE-2016-2112.html
patch, vendor-advisory
-
slackware.com
/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00020.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0612.html
vendor-advisory
-
ubuntu.com
/usn/USN-2950-1
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00024.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0613.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00042.html
vendor-advisory
-
ubuntu.com
/usn/USN-2950-5
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2016-April/182185.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0624.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0618.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00022.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00021.html
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2016-April/182272.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0614.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00023.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0620.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0611.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00047.html
vendor-advisory
-
ubuntu.com
/usn/USN-2950-3
vendor-advisory
-
lists.fedoraproject.org
/pipermail/package-announce/2016-April/182288.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2016-04/msg00048.html
vendor-advisory
-
rhn.redhat.com
/errata/RHSA-2016-0619.html
vendor-advisory
-
security.gentoo.org
/glsa/201612-47
vendor-advisory
-
debian.org
/security/2016/dsa-3548
vendor-advisory
-
ubuntu.com
/usn/USN-2950-2
vendor-advisory
-
ubuntu.com
/usn/USN-2950-4
vendor-advisory
- badlock.org /
- oracle.com /technetwork/topics/security/linuxbulletinapr2016-2952096.html
- samba.org /samba/history/samba-4.2.10.html
- samba.org /samba/latest_news.html#4.4.2
-
securitytracker.com
/id/1035533
vdb-entry
- bto.bluecoat.com /security-advisory/sa122
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05082964
- h20566.www2.hpe.com /hpsc/doc/public/display?docId=emr_na-c05087821
- h20566.www2.hpe.com /portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399
Sources
- CVE List CVE-2016-2112
- NVD CVE-2016-2112
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.