ALPINE-CVE-2016-2125 — Vulnetix

Try Vulnetix Request Demo

ALPINE-CVE-2016-2125 PUBLISHED CVSS 6.5 MEDIUM

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.

Risk Scores

CVSS v3.1

6.5

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

Vendor	Product	Versions
Alpine:v3.4	samba	3.3.7-r3, 3.3.7-r2, 3.3.7-r1
Alpine:v3.3	samba	3.3.4-r0, 0, 3.2.10-r0
Alpine:v3.2	samba	0, 4.2.9-r0, 4.2.7-r0

Timeline

Oct 31, 2018 CVE Published
Nov 19, 2025 CVE Updated
Apr 30, 2026 Distribution Patch

References

https://security.alpinelinux.org/vuln/CVE-2016-2125 advisory

Open in Interactive Console →