SUSE-SU-2016:3272-1

Advisory lineage Upstream: 3 Downstream: 0
Published: 27 Dec 2016, 12:34
Last modified:04 Feb 2026, 03:38

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Dec 2016, 12:34
Published
Vulnerability first disclosed
04 Feb 2026, 03:38
Last Modified
Vulnerability information updated

Description

Security update for samba This update for samba fixes the following issues: Security issues fixed: - CVE-2016-2125: Don't send delegated credentials to all servers. (bsc#1014441). - CVE-2016-2126: Denial of service due to a client triggered crash in the winbindd parent process. (bsc#1014442). - CVE-2016-2123: Heap-based Buffer Overflow Remote Code Execution Vulnerability. (bsc#1014437). The component affected is not built in our packages. Non security issues fixed: - s3/client: obey 'disable netbios' smb.conf param, don't connect via NBT port; (bsc#1009085) - Add doc changes for net ads --no-dns-updates switch; (bsc#991564) - Include vfstest in samba-test; (bsc#1001203). - s3/winbindd: using default domain with user@domain.com format fails (bsc#997833). - Fix illegal memory access after memory has been deleted (bsc#975299). - Fix bug in tevent poll backend causing winbind to loop tightly (bsc#994500). - Various fixes for spnego/ntlm (bsc#986675).

Affected Systems

  • suse•samba&distro=SUSE Linux Enterprise Desktop 12 SP1

    < 4.2.4-28.3.1

  • suse•samba&distro=SUSE Linux Enterprise Desktop 12 SP2

    < 4.2.4-28.3.1

  • suse•samba&distro=SUSE Linux Enterprise High Availability Extension 12 SP1

    < 4.2.4-28.3.1

  • suse•samba&distro=SUSE Linux Enterprise Server 12 SP1

    < 4.2.4-28.3.1

  • suse•samba&distro=SUSE Linux Enterprise Server 12 SP2

    < 4.2.4-28.3.1

  • suse•samba&distro=SUSE Linux Enterprise Server for Raspberry Pi 12 SP2

    < 4.2.4-28.3.1

  • suse•samba&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1

    < 4.2.4-28.3.1

  • suse•samba&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP2

    < 4.2.4-28.3.1

  • suse•samba&distro=SUSE Linux Enterprise Software Development Kit 12 SP1

    < 4.2.4-28.3.1

  • suse•samba&distro=SUSE Linux Enterprise Software Development Kit 12 SP2

    < 4.2.4-28.3.1

References (14)