VulnerabilityModified
CVE-2016-2126
Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum.
MEDIUM 6.5EPSS 6.59%
Does this matter?
Lower severity and a low EPSS score (6.59%). Track it; it rarely justifies an emergency change on its own.
Description
Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 6.59% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- samba/samba
- Source
- secalert@redhat.com
References
- http://rhn.redhat.com/errata/RHSA-2017-0494.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0495.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0662.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0744.htmlThird Party Advisory
- http://www.securityfocus.com/bid/94994Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037495Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1265Third Party Advisory
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730Third Party Advisory
- https://www.samba.org/samba/security/CVE-2016-2126.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0494.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0495.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0662.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2017-0744.htmlThird Party Advisory
- http://www.securityfocus.com/bid/94994Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037495Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2017:1265Third Party Advisory
- https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730Third Party Advisory
- https://www.samba.org/samba/security/CVE-2016-2126.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.