CVE-2016-2119 is a critical vulnerability in Samba versions 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x before 4.4.5. It allows man-in-the-middle attackers to bypass client-signing protections by manipulating specific SMB2 session flags, enabling them to spoof SMB2 and SMB3 servers. This vulnerability carries a CVSS v3.1 score of 7.5 (HIGH), indicating a high potential for impact on confidentiality, integrity, and availability, with a network attack vector, high attack complexity, and user interaction required. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 4.0.0, < 4.2.14CPE matchmatch criteria | cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* | ||
>= 4.3.0, < 4.3.11CPE matchmatch criteria | cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* | ||
>= 4.4.0, < 4.4.5CPE matchmatch criteria | cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.4 Bluesky, 0.2 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.6 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.