Every CVE Search/ Get API key

CVE-2016-0771

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4...

5.9 MediumFix available

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
High

Exploit likelihood

3.01%Up 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.9

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Record
CVE-2016-0771
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
CVSS 2.0
4.9 MediumAV:N/AC:M/Au:S/C:P/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Record
CVE-2016-0771
Updated
2026-11-02
EUVDEUVD-2016-0787 No score

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Record
EUVD-2016-0787
Updated
2026-11-03
GitHub AdvisoriesGHSA-mjrq-735v-hm5h 5.9

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4...

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Record
GHSA-mjrq-735v-hm5h
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-119
Updated
2026-11-02
OSV 5.9

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Record
CVE-2016-0771
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-0771 5.9

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Record
DEBIAN-CVE-2016-0771
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-0771 5.9

The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from process memory by uploading a crafted DNS TXT record.

Record
UBUNTU-CVE-2016-0771
CVSS 3.0
5.9 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score

ctdb-4.5.0-1.1 on GA media

These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10069-1
Updated
2026-11-02
OSVUSN-2922-1 No score

samba vulnerabilities

Jeremy Allison discovered that Samba incorrectly handled ACLs on symlink paths. A remote attacker could use this issue to overwrite the ownership of ACLs using symlinks. (CVE-2015-7560)

Garming Sam and Douglas Bagnall discovered that the Samba internal DNS server incorrectly handled certain DNS TXT records. A remote attacker could use this issue to cause Samba to crash, resulting in a denial of service, or possibly obtain uninitialized memory contents. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 15.10. (CVE-2016-0771)

It was discovered that the Samba Web Administration Tool (SWAT) was vulnerable to clickjacking and cross-site request forgery attacks. This issue only affected Ubuntu 12.04 LTS. (CVE-2013-0213, CVE-2013-0214)

Record
USN-2922-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Debian:12
 before 2:4.3.6+dfsg-1
2:4.3.6+dfsg-1
samba
Debian:13
 before 2:4.3.6+dfsg-1
2:4.3.6+dfsg-1
samba
Debian:14
 before 2:4.3.6+dfsg-1
2:4.3.6+dfsg-1
samba
Debian:7
From an advisory covering 2 CVEs
 before 2:3.6.6-6+deb7u7, plus listed versions
2:3.6.6-62:3.6.6-6+deb7u12:3.6.6-6+deb7u1~bpo60+12:3.6.6-6+deb7u22:3.6.6-6+deb7u2~bpo60+1
Show 6 moreShow less
2:3.6.6-6+deb7u32:3.6.6-6+deb7u42:3.6.6-6+deb7u4~bpo60+12:3.6.6-6+deb7u52:3.6.6-6+deb7u5~bpo60+12:3.6.6-6+deb7u6
2:3.6.6-6+deb7u7
samba
Debian:8
From an advisory covering 2 CVEs
 before 2:4.1.17+dfsg-2+deb8u2, plus listed versions
2:4.1.17+dfsg-22:4.1.17+dfsg-2+deb8u1
2:4.1.17+dfsg-2+deb8u2
samba
Ubuntu:14.04:LTS
 before 2:4.1.6+dfsg-1ubuntu2.14.04.13, plus listed versions
2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3
Show 14 moreShow less
2:4.1.3+dfsg-2ubuntu42:4.1.3+dfsg-2ubuntu52:4.1.6+dfsg-1ubuntu12:4.1.6+dfsg-1ubuntu22:4.1.6+dfsg-1ubuntu2.14.04.12:4.1.6+dfsg-1ubuntu2.14.04.22:4.1.6+dfsg-1ubuntu2.14.04.32:4.1.6+dfsg-1ubuntu2.14.04.42:4.1.6+dfsg-1ubuntu2.14.04.52:4.1.6+dfsg-1ubuntu2.14.04.72:4.1.6+dfsg-1ubuntu2.14.04.82:4.1.6+dfsg-1ubuntu2.14.04.92:4.1.6+dfsg-1ubuntu2.14.04.112:4.1.6+dfsg-1ubuntu2.14.04.12
2:4.1.6+dfsg-1ubuntu2.14.04.13
samba
Ubuntu:16.04:LTS
 before 2:4.3.6+dfsg-1ubuntu1, plus listed versions
2:4.1.17+dfsg-4ubuntu22:4.1.20+dfsg-1ubuntu12:4.1.20+dfsg-1ubuntu22:4.1.20+dfsg-1ubuntu32:4.1.20+dfsg-1ubuntu52:4.3.3+dfsg-1ubuntu12:4.3.3+dfsg-1ubuntu22:4.3.3+dfsg-1ubuntu3
2:4.3.6+dfsg-1ubuntu1
samba
Ubuntu:14.04:LTS
From an advisory covering 2 CVEs
 before 2:4.1.6+dfsg-1ubuntu2.14.04.13, plus listed versions
2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3
Show 14 moreShow less
2:4.1.3+dfsg-2ubuntu42:4.1.3+dfsg-2ubuntu52:4.1.6+dfsg-1ubuntu12:4.1.6+dfsg-1ubuntu22:4.1.6+dfsg-1ubuntu2.14.04.12:4.1.6+dfsg-1ubuntu2.14.04.22:4.1.6+dfsg-1ubuntu2.14.04.32:4.1.6+dfsg-1ubuntu2.14.04.42:4.1.6+dfsg-1ubuntu2.14.04.52:4.1.6+dfsg-1ubuntu2.14.04.72:4.1.6+dfsg-1ubuntu2.14.04.82:4.1.6+dfsg-1ubuntu2.14.04.92:4.1.6+dfsg-1ubuntu2.14.04.112:4.1.6+dfsg-1ubuntu2.14.04.12
2:4.1.6+dfsg-1ubuntu2.14.04.13
samba
openSUSE:Tumbleweed
From an advisory covering 56 CVEs
 before 4.5.0-1.1
4.5.0-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-0771 is a medium vulnerability (CVSS 5.9) in Samba, published March 8, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.01%, the 87th percentile. Fixed in samba 2:4.3.6+dfsg-1.

References

Show 67 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open