CVE-2016-2125: redhat enterprise_linux_desktop Improper Authentication
Vulnerability summary
CVE-2016-2125 is a medium (CVSS 6.5) Improper Authentication vulnerability in redhat enterprise_linux_desktop. EPSS estimates a 9.20% chance of exploitation in the next 30 days, higher than 95.3% of scored vulnerabilities.
Not severe (CVSS 6.4, adjacent network); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 13 · Related 7Timeline
- 31-10-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
CVSS metrics
8 scores · 5 sources · 3 versions- OSV · AlpineEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- NVDNIST6.4MediumCVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
- OSV · UbuntuEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NDiffers
EPSS trend
Probability
9.20%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
No change 0.00 pp
From 9.20% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
- CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Affected systems
Known conditions: adjacent network, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Redhat7 products
- enterprise_linux_desktop6.0 | 7.0
- enterprise_linux_server6.0 | 7.0
- enterprise_linux_server_aus7.4 | 7.6
- enterprise_linux_server_eus7.3 | 7.4 | 7.5 | 7.6
- enterprise_linux_server_tus7.3 | 7.6
[unknown]1 product
- sambaEOL4.5.3 | 4.4.8 | 4.3.13
Alpine1 product
- samba≥ 3.0.25, < 4.2.14-r1 | ≥ 3.0.25, < 4.4.5-r2
Debian1 product
- samba< 2:4.5.2+dfsg-2 | < 2:3.6.6-6+deb7u11
Mageia1 product
- samba< 3.6.25-2.6.mga5
Samba1 product
- samba≥ 3.0.25, < 4.3.13 | ≥ 4.4.0, < 4.4.8 | ≥ 4.5.0, < 4.5.3
Ubuntu1 product
- samba< 2:4.3.11+dfsg-0ubuntu0.14.04.4 | < 2:4.3.11+dfsg-0ubuntu0.16.04.3
7 vendors · 13 products
References
16 links- bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2125X Refsource CONFIRMIssue TrackingMitigationThird Party Advisory
- www.samba.org/samba/security/CVE-2016-2125.htmlX Refsource CONFIRMMitigationPatchVendor AdvisoryAdvisoryREPORT
