CVE-2016-2123

A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndr_pull_dnsp_name parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute over LDAP can trigger this memory corruption. By default, all authenticated LDAP users can write to the dnsRecord attribute on new DNS objects. This makes the defect a remote privilege escalation.

• CWE-122
• CWE-119

• http://www.securityfocus.com/bid/94970Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037493Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2123Issue Tracking
• https://www.samba.org/samba/security/CVE-2016-2123.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/94970Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037493Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-2123Issue Tracking
• https://www.samba.org/samba/security/CVE-2016-2123.htmlPatch, Vendor Advisory

Published

Nov 1, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2117The atl2_probe function in drivers/net/ethernet/atheros/atlx…
• CVE-2016-2118The MS-SAMR and MS-LSAD protocol implementations in Samba 3.…7.5
• CVE-2016-2119libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x …7.5
• CVE-2016-2120An issue has been found in PowerDNS Authoritative Server ver…7.5
• CVE-2016-2121A permissions flaw was found in redis, which sets weak permi…4
• CVE-2016-2122Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2124A flaw was found in the way samba implemented SMB1 authentic…5.9
• CVE-2016-2125It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13…6.5
• CVE-2016-2126Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege e…6.5
• CVE-2016-2127Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2128Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2129Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…