View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-2125 medium priority: Ubuntu including 2 source packages (samba, samba4), 12 status rows across 6 suites (precise, trusty, upstream, xenial, yakkety, zesty): released 5, DNE 4, needs-triage 2, ignored 1.
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.