vulnerability
Amazon Linux AMI: CVE-2016-2124: Security patch for samba (ALAS-2022-1564)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:P/I:N/A:N) | Nov 10, 2021 | Feb 19, 2022 | Oct 14, 2022 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Nov 10, 2021
Added
Feb 19, 2022
Modified
Oct 14, 2022
Description
A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.
Solution
amazon-linux-upgrade-samba
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.