Homepage

Access Restriction Bypass The advisory has been revoked - it doesn't affect any version of package samba  (opens in a new tab)

Threat Intelligence

EPSS
6.59% (93rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UBUNTU1204-SAMBA-622267
  • published11 May 2017
  • disclosed11 May 2017
Report a new vulnerability Found a mistake?

Introduced: 11 May 2017

CVE-2016-2126  (opens in a new tab)
CWE-264  (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:12.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream samba package and not the samba package as distributed by Ubuntu.

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.