VulnSocial

CVE-2016-2118(canonical / debian_linux)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The MS-SAMR and MS-LSAD protocol implementations in Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 mishandle DCERPC connections, which allows man-in-the-middle attackers to perform protocol-downgrade attacks and impersonate users by modifying the client-server data stream, aka "BADLOCK."

canonical CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-254

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • debian_linux
  • samba
  • ubuntu_linux

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
canonicaldebiansamba
Products
debian_linuxsambaubuntu_linux

6 versions affected across 3 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-25: 109-25
Full discourse1 post
  • Mayowa@sudomayor

    The scan picked up multiple findings, including a Critical OS end-of-life issue and a High-severity Samba vulnerability (CVE-2016-2118).

    1002076
    1.5K followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
OScanonicalubuntu_linux12.04--
OScanonicalubuntu_linux14.04--
OScanonicalubuntu_linux14.04--
OScanonicalubuntu_linux15.10--
OScanonicalubuntu_linux16.04--
OScanonicalubuntu_linux16.04--
OSdebiandebian_linux7.0--
OSdebiandebian_linux8.0--
Appsambasamba---

Explore more

Back to dashboardcanonical CVEsdebian CVEssamba CVEsdebian_linux vulnerabilities