CVE-2016-2126

Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate) checksum. A remote, authenticated, attacker can cause the winbindd process to crash using a legitimate Kerberos ticket. A local service with access to the winbindd privileged pipe can cause winbindd to cache elevated access permissions.

• CWE-264

• http://rhn.redhat.com/errata/RHSA-2017-0494.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0495.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0662.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0744.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94994Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037495Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:1265Third Party Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730Third Party Advisory
• https://www.samba.org/samba/security/CVE-2016-2126.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0494.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0495.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0662.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2017-0744.htmlThird Party Advisory
• http://www.securityfocus.com/bid/94994Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037495Third Party Advisory, VDB Entry
• https://access.redhat.com/errata/RHSA-2017:1265Third Party Advisory
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43730Third Party Advisory
• https://www.samba.org/samba/security/CVE-2016-2126.htmlVendor Advisory

Published

May 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2120An issue has been found in PowerDNS Authoritative Server ver…7.5
• CVE-2016-2121A permissions flaw was found in redis, which sets weak permi…4
• CVE-2016-2122Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2123A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba…8.8
• CVE-2016-2124A flaw was found in the way samba implemented SMB1 authentic…5.9
• CVE-2016-2125It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13…6.5
• CVE-2016-2127Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2128Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2129Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2130Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2131Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2132Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…