CVE-2016-2118: canonical ubuntu_linux 7PK - Security Features
CVSS: 7.5v3.1HighModified
AliasesUBUNTU-CVE-2016-2118DEBIAN-CVE-2016-2118
Published 12-04-2016Last modified 05-08-2024
Vulnerability summary
CVE-2016-2118 is a high (CVSS 7.5) 7PK - Security Features vulnerability in canonical ubuntu_linux. EPSS estimates a 36.93% chance of exploitation in the next 30 days, higher than 98.5% of scored vulnerabilities.
CVSS score
7.5/10
010
High · v3.1 (NVD)EPSS score
36.93%
0%100%
High · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 19 · Related 6Timeline
- 12-04-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."
CVSS metrics
4 scores · 3 sources · 2 versionsHigh 7.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HSourcesAll 3 agree
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Medium 6.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
36.93%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 36.93% on 19-09-2026
19-09-202619-10-2026
EPSS score36.93%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian2 products
- samba< 2:4.3.7+dfsg-1
- debian_linuxEOL7.0 | 8.0
Canonical1 product
- ubuntu_linuxEOL12.04 | 14.04 | 15.10 | 16.04
Samba1 product
- samba≥ 3.6.0, < 4.2.10 | ≥ 4.3.0, < 4.3.7 | ≥ 4.4.0, < 4.4.1
Ubuntu1 product
- samba< 2:4.3.8+dfsg-0ubuntu0.14.04.2 | < 2:4.3.8+dfsg-0ubuntu1
4 vendors · 5 products
References
49 links- www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.458012Vendor AdvisoryX Refsource SLACKWAREMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00020.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05166182X Refsource CONFIRMThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00024.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.htmlX Refsource CONFIRMThird Party Advisory
Show all 49 references
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00042.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2016-April/182185.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00022.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00021.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2016-April/182272.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00023.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00047.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.fedoraproject.org/pipermail/package-announce/2016-April/182288.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00048.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05162399X Refsource CONFIRMThird Party Advisory
- kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40196X Refsource CONFIRMThird Party Advisory
- kb.netapp.com/support/s/article/ka51A0000008SXzQAM/smb-vulnerabilities-in-multiple-netapp-productsX Refsource CONFIRMThird Party Advisory