Search
Find a vulnerability
Search criteria
Related vulnerabilities
CERTFR-2026-AVI-0939
Vulnerability from certfr_avis - Published: 2026-07-28 - Updated: 2026-07-28
De multiples vulnérabilités ont été découvertes dans Samba. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et un contournement de la politique de sécurité.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
References
| Title | Publication Time | Tags | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Samba versions 4.23.x ant\u00e9rieures \u00e0 4.23.9",
"product": {
"name": "Samba",
"vendor": {
"name": "Samba",
"scada": false
}
}
},
{
"description": "Samba versions ant\u00e9rieures \u00e0 4.22.10",
"product": {
"name": "Samba",
"vendor": {
"name": "Samba",
"scada": false
}
}
},
{
"description": "Samba versions 4.24.x ant\u00e9rieures \u00e0 4.24.4",
"product": {
"name": "Samba",
"vendor": {
"name": "Samba",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2026-58222",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58222"
},
{
"name": "CVE-2026-58221",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58221"
},
{
"name": "CVE-2026-58224",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58224"
},
{
"name": "CVE-2026-58218",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58218"
},
{
"name": "CVE-2026-58216",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58216"
},
{
"name": "CVE-2025-58218",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-58218"
},
{
"name": "CVE-2026-6949",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6949"
}
],
"initial_release_date": "2026-07-28T00:00:00",
"last_revision_date": "2026-07-28T00:00:00",
"links": [],
"reference": "CERTFR-2026-AVI-0939",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2026-07-28T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Samba. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Samba",
"vendor_advisories": [
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 Samba CVE-2026-58221",
"url": "https://www.samba.org/samba/security/CVE-2026-58221.html"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 Samba CVE-2026-6949",
"url": "https://www.samba.org/samba/security/CVE-2026-6949.html"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 Samba CVE-2026-58224",
"url": "https://www.samba.org/samba/security/CVE-2026-58224.html"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 Samba CVE-2026-58222",
"url": "https://www.samba.org/samba/security/CVE-2026-58222.html"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 Samba CVE-2026-58216",
"url": "https://www.samba.org/samba/security/CVE-2026-58216.html"
},
{
"published_at": "2026-07-28",
"title": "Bulletin de s\u00e9curit\u00e9 Samba CVE-2026-58218",
"url": "https://www.samba.org/samba/security/CVE-2026-58218.html"
}
]
}
OESA-2026-3295 (CVE-2026-58216)
Vulnerability from osv_openeuler – Published: 2026-08-07 02:44 – Updated: 2026-08-07 02:44 – Source website
VLAI
Summary
samba security update
Details
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)
Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)
An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)
A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)
Severity
8.8 (High)
References
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"ctdb-4.17.5-17.oe2203sp4.aarch64.rpm",
"libsmbclient-4.17.5-17.oe2203sp4.aarch64.rpm",
"libsmbclient-devel-4.17.5-17.oe2203sp4.aarch64.rpm",
"libwbclient-4.17.5-17.oe2203sp4.aarch64.rpm",
"libwbclient-devel-4.17.5-17.oe2203sp4.aarch64.rpm",
"python3-samba-4.17.5-17.oe2203sp4.aarch64.rpm",
"python3-samba-dc-4.17.5-17.oe2203sp4.aarch64.rpm",
"python3-samba-test-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-client-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-client-libs-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-common-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-common-tools-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-dc-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-dc-bind-dlz-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-dc-libs-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-dc-provision-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-debuginfo-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-debugsource-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-devel-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-help-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-krb5-printing-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-libs-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-test-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-usershares-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-winbind-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-winbind-clients-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-winbind-krb5-locator-4.17.5-17.oe2203sp4.aarch64.rpm",
"samba-winbind-modules-4.17.5-17.oe2203sp4.aarch64.rpm"
],
"noarch": [
"samba-pidl-4.17.5-17.oe2203sp4.noarch.rpm"
],
"src": [
"samba-4.17.5-17.oe2203sp4.src.rpm"
],
"x86_64": [
"ctdb-4.17.5-17.oe2203sp4.x86_64.rpm",
"libsmbclient-4.17.5-17.oe2203sp4.x86_64.rpm",
"libsmbclient-devel-4.17.5-17.oe2203sp4.x86_64.rpm",
"libwbclient-4.17.5-17.oe2203sp4.x86_64.rpm",
"libwbclient-devel-4.17.5-17.oe2203sp4.x86_64.rpm",
"python3-samba-4.17.5-17.oe2203sp4.x86_64.rpm",
"python3-samba-dc-4.17.5-17.oe2203sp4.x86_64.rpm",
"python3-samba-test-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-client-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-client-libs-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-common-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-common-tools-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-dc-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-dc-bind-dlz-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-dc-libs-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-dc-provision-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-debuginfo-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-debugsource-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-devel-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-help-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-krb5-printing-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-libs-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-test-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-usershares-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-vfs-glusterfs-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-winbind-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-winbind-clients-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-winbind-krb5-locator-4.17.5-17.oe2203sp4.x86_64.rpm",
"samba-winbind-modules-4.17.5-17.oe2203sp4.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:22.03-LTS-SP4",
"name": "samba",
"purl": "pkg:rpm/openEuler/samba\u0026distro=openEuler-22.03-LTS-SP4"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.17.5-17.oe2203sp4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)",
"id": "OESA-2026-3295",
"modified": "2026-08-07T02:44:41Z",
"published": "2026-08-07T02:44:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3295"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58216"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58218"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58221"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58222"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58224"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6949"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "samba security update",
"upstream": [
"CVE-2026-58216",
"CVE-2026-58218",
"CVE-2026-58221",
"CVE-2026-58222",
"CVE-2026-58224",
"CVE-2026-6949"
]
}
OESA-2026-3296 (CVE-2026-58216)
Vulnerability from osv_openeuler – Published: 2026-08-07 02:44 – Updated: 2026-08-07 02:44 – Source website
VLAI
Summary
samba security update
Details
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)
Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)
An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)
A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)
Severity
8.8 (High)
References
| URL | Type | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"ctdb-4.19.3-10.oe2403sp4.aarch64.rpm",
"libsmbclient-4.19.3-10.oe2403sp4.aarch64.rpm",
"libsmbclient-devel-4.19.3-10.oe2403sp4.aarch64.rpm",
"libwbclient-4.19.3-10.oe2403sp4.aarch64.rpm",
"libwbclient-devel-4.19.3-10.oe2403sp4.aarch64.rpm",
"python3-samba-4.19.3-10.oe2403sp4.aarch64.rpm",
"python3-samba-dc-4.19.3-10.oe2403sp4.aarch64.rpm",
"python3-samba-test-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-client-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-client-libs-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-common-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-common-tools-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-dc-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-dc-bind-dlz-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-dc-libs-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-dc-provision-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-debuginfo-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-debugsource-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-devel-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-help-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-krb5-printing-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-libs-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-test-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-tools-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-usershares-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-winbind-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-winbind-clients-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-winbind-krb5-locator-4.19.3-10.oe2403sp4.aarch64.rpm",
"samba-winbind-modules-4.19.3-10.oe2403sp4.aarch64.rpm"
],
"noarch": [
"samba-pidl-4.19.3-10.oe2403sp4.noarch.rpm"
],
"src": [
"samba-4.19.3-10.oe2403sp4.src.rpm"
],
"x86_64": [
"ctdb-4.19.3-10.oe2403sp4.x86_64.rpm",
"libsmbclient-4.19.3-10.oe2403sp4.x86_64.rpm",
"libsmbclient-devel-4.19.3-10.oe2403sp4.x86_64.rpm",
"libwbclient-4.19.3-10.oe2403sp4.x86_64.rpm",
"libwbclient-devel-4.19.3-10.oe2403sp4.x86_64.rpm",
"python3-samba-4.19.3-10.oe2403sp4.x86_64.rpm",
"python3-samba-dc-4.19.3-10.oe2403sp4.x86_64.rpm",
"python3-samba-test-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-client-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-client-libs-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-common-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-common-tools-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-dc-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-dc-bind-dlz-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-dc-libs-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-dc-provision-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-debuginfo-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-debugsource-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-devel-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-help-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-krb5-printing-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-libs-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-test-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-tools-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-usershares-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-vfs-glusterfs-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-winbind-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-winbind-clients-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-winbind-krb5-locator-4.19.3-10.oe2403sp4.x86_64.rpm",
"samba-winbind-modules-4.19.3-10.oe2403sp4.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP4",
"name": "samba",
"purl": "pkg:rpm/openEuler/samba\u0026distro=openEuler-24.03-LTS-SP4"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.19.3-10.oe2403sp4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)",
"id": "OESA-2026-3296",
"modified": "2026-08-07T02:44:45Z",
"published": "2026-08-07T02:44:45Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3296"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58216"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58218"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58221"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58222"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58224"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6949"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "samba security update",
"upstream": [
"CVE-2026-58216",
"CVE-2026-58218",
"CVE-2026-58221",
"CVE-2026-58222",
"CVE-2026-58224",
"CVE-2026-6949"
]
}
OESA-2026-3297 (CVE-2026-58216)
Vulnerability from osv_openeuler – Published: 2026-08-07 02:44 – Updated: 2026-08-07 02:44 – Source website
VLAI
Summary
samba security update
Details
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)
Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)
An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)
A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)
Severity
8.8 (High)
References
| URL | Type | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"ctdb-4.11.12-39.oe2003sp4.aarch64.rpm",
"ctdb-tests-4.11.12-39.oe2003sp4.aarch64.rpm",
"libsmbclient-4.11.12-39.oe2003sp4.aarch64.rpm",
"libsmbclient-devel-4.11.12-39.oe2003sp4.aarch64.rpm",
"libwbclient-4.11.12-39.oe2003sp4.aarch64.rpm",
"libwbclient-devel-4.11.12-39.oe2003sp4.aarch64.rpm",
"python3-samba-4.11.12-39.oe2003sp4.aarch64.rpm",
"python3-samba-dc-4.11.12-39.oe2003sp4.aarch64.rpm",
"python3-samba-test-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-client-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-common-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-common-tools-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-dc-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-dc-bind-dlz-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-dc-provision-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-debuginfo-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-debugsource-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-devel-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-help-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-krb5-printing-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-libs-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-test-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-winbind-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-winbind-clients-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-winbind-krb5-locator-4.11.12-39.oe2003sp4.aarch64.rpm",
"samba-winbind-modules-4.11.12-39.oe2003sp4.aarch64.rpm"
],
"noarch": [
"samba-pidl-4.11.12-39.oe2003sp4.noarch.rpm"
],
"src": [
"samba-4.11.12-39.oe2003sp4.src.rpm"
],
"x86_64": [
"ctdb-4.11.12-39.oe2003sp4.x86_64.rpm",
"ctdb-tests-4.11.12-39.oe2003sp4.x86_64.rpm",
"libsmbclient-4.11.12-39.oe2003sp4.x86_64.rpm",
"libsmbclient-devel-4.11.12-39.oe2003sp4.x86_64.rpm",
"libwbclient-4.11.12-39.oe2003sp4.x86_64.rpm",
"libwbclient-devel-4.11.12-39.oe2003sp4.x86_64.rpm",
"python3-samba-4.11.12-39.oe2003sp4.x86_64.rpm",
"python3-samba-dc-4.11.12-39.oe2003sp4.x86_64.rpm",
"python3-samba-test-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-client-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-common-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-common-tools-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-dc-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-dc-bind-dlz-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-dc-provision-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-debuginfo-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-debugsource-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-devel-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-help-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-krb5-printing-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-libs-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-test-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-vfs-glusterfs-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-winbind-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-winbind-clients-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-winbind-krb5-locator-4.11.12-39.oe2003sp4.x86_64.rpm",
"samba-winbind-modules-4.11.12-39.oe2003sp4.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:20.03-LTS-SP4",
"name": "samba",
"purl": "pkg:rpm/openEuler/samba\u0026distro=openEuler-20.03-LTS-SP4"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.11.12-39.oe2003sp4"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)",
"id": "OESA-2026-3297",
"modified": "2026-08-07T02:44:48Z",
"published": "2026-08-07T02:44:48Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3297"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58216"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58218"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58221"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58222"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58224"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6949"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "samba security update",
"upstream": [
"CVE-2026-58216",
"CVE-2026-58218",
"CVE-2026-58221",
"CVE-2026-58222",
"CVE-2026-58224",
"CVE-2026-6949"
]
}
OESA-2026-3366 (CVE-2026-58216)
Vulnerability from osv_openeuler – Published: 2026-08-13 14:01 – Updated: 2026-08-13 14:01 – Source website
VLAI
Summary
samba security update
Details
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)
Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)
An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)
A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)
Severity
8.8 (High)
References
| URL | Type | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"ctdb-4.19.3-10.oe2403sp1.aarch64.rpm",
"libsmbclient-4.19.3-10.oe2403sp1.aarch64.rpm",
"libsmbclient-devel-4.19.3-10.oe2403sp1.aarch64.rpm",
"libwbclient-4.19.3-10.oe2403sp1.aarch64.rpm",
"libwbclient-devel-4.19.3-10.oe2403sp1.aarch64.rpm",
"python3-samba-4.19.3-10.oe2403sp1.aarch64.rpm",
"python3-samba-dc-4.19.3-10.oe2403sp1.aarch64.rpm",
"python3-samba-test-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-client-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-client-libs-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-common-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-common-tools-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-dc-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-dc-bind-dlz-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-dc-libs-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-dc-provision-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-debuginfo-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-debugsource-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-devel-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-help-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-krb5-printing-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-libs-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-test-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-tools-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-usershares-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-winbind-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-winbind-clients-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-winbind-krb5-locator-4.19.3-10.oe2403sp1.aarch64.rpm",
"samba-winbind-modules-4.19.3-10.oe2403sp1.aarch64.rpm"
],
"noarch": [
"samba-pidl-4.19.3-10.oe2403sp1.noarch.rpm"
],
"src": [
"samba-4.19.3-10.oe2403sp1.src.rpm"
],
"x86_64": [
"ctdb-4.19.3-10.oe2403sp1.x86_64.rpm",
"libsmbclient-4.19.3-10.oe2403sp1.x86_64.rpm",
"libsmbclient-devel-4.19.3-10.oe2403sp1.x86_64.rpm",
"libwbclient-4.19.3-10.oe2403sp1.x86_64.rpm",
"libwbclient-devel-4.19.3-10.oe2403sp1.x86_64.rpm",
"python3-samba-4.19.3-10.oe2403sp1.x86_64.rpm",
"python3-samba-dc-4.19.3-10.oe2403sp1.x86_64.rpm",
"python3-samba-test-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-client-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-client-libs-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-common-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-common-tools-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-dc-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-dc-bind-dlz-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-dc-libs-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-dc-provision-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-debuginfo-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-debugsource-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-devel-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-help-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-krb5-printing-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-libs-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-test-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-tools-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-usershares-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-vfs-glusterfs-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-winbind-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-winbind-clients-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-winbind-krb5-locator-4.19.3-10.oe2403sp1.x86_64.rpm",
"samba-winbind-modules-4.19.3-10.oe2403sp1.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP1",
"name": "samba",
"purl": "pkg:rpm/openEuler/samba\u0026distro=openEuler-24.03-LTS-SP1"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.19.3-10.oe2403sp1"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)",
"id": "OESA-2026-3366",
"modified": "2026-08-13T14:01:42Z",
"published": "2026-08-13T14:01:42Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3366"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58216"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58218"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58221"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58222"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58224"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6949"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "samba security update",
"upstream": [
"CVE-2026-58216",
"CVE-2026-58218",
"CVE-2026-58221",
"CVE-2026-58222",
"CVE-2026-58224",
"CVE-2026-6949"
]
}
OESA-2026-3367 (CVE-2026-58216)
Vulnerability from osv_openeuler – Published: 2026-08-13 14:01 – Updated: 2026-08-13 14:01 – Source website
VLAI
Summary
samba security update
Details
Samba is a suite of programs for Linux and Unix to interoperate with Windows.
Security Fix(es):
An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)
Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)
An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)
A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)
Severity
8.8 (High)
References
| URL | Type | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"affected": [
{
"ecosystem_specific": {
"aarch64": [
"ctdb-4.19.3-10.oe2403sp3.aarch64.rpm",
"libsmbclient-4.19.3-10.oe2403sp3.aarch64.rpm",
"libsmbclient-devel-4.19.3-10.oe2403sp3.aarch64.rpm",
"libwbclient-4.19.3-10.oe2403sp3.aarch64.rpm",
"libwbclient-devel-4.19.3-10.oe2403sp3.aarch64.rpm",
"python3-samba-4.19.3-10.oe2403sp3.aarch64.rpm",
"python3-samba-dc-4.19.3-10.oe2403sp3.aarch64.rpm",
"python3-samba-test-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-client-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-client-libs-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-common-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-common-tools-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-dc-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-dc-bind-dlz-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-dc-libs-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-dc-provision-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-debuginfo-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-debugsource-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-devel-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-help-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-krb5-printing-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-libs-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-test-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-tools-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-usershares-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-winbind-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-winbind-clients-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-winbind-krb5-locator-4.19.3-10.oe2403sp3.aarch64.rpm",
"samba-winbind-modules-4.19.3-10.oe2403sp3.aarch64.rpm"
],
"noarch": [
"samba-pidl-4.19.3-10.oe2403sp3.noarch.rpm"
],
"src": [
"samba-4.19.3-10.oe2403sp3.src.rpm"
],
"x86_64": [
"ctdb-4.19.3-10.oe2403sp3.x86_64.rpm",
"libsmbclient-4.19.3-10.oe2403sp3.x86_64.rpm",
"libsmbclient-devel-4.19.3-10.oe2403sp3.x86_64.rpm",
"libwbclient-4.19.3-10.oe2403sp3.x86_64.rpm",
"libwbclient-devel-4.19.3-10.oe2403sp3.x86_64.rpm",
"python3-samba-4.19.3-10.oe2403sp3.x86_64.rpm",
"python3-samba-dc-4.19.3-10.oe2403sp3.x86_64.rpm",
"python3-samba-test-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-client-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-client-libs-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-common-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-common-tools-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-dc-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-dc-bind-dlz-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-dc-libs-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-dc-provision-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-debuginfo-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-debugsource-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-devel-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-help-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-krb5-printing-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-libs-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-test-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-tools-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-usershares-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-vfs-glusterfs-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-winbind-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-winbind-clients-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-winbind-krb5-locator-4.19.3-10.oe2403sp3.x86_64.rpm",
"samba-winbind-modules-4.19.3-10.oe2403sp3.x86_64.rpm"
]
},
"package": {
"ecosystem": "openEuler:24.03-LTS-SP3",
"name": "samba",
"purl": "pkg:rpm/openEuler/samba\u0026distro=openEuler-24.03-LTS-SP3"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.19.3-10.oe2403sp3"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"database_specific": {
"severity": "High"
},
"details": "Samba is a suite of programs for Linux and Unix to interoperate with Windows.\r\n\r\nSecurity Fix(es):\n\nAn out-of-bounds read flaw was found in Samba\u0026apos;s Kerberos Key Distribution Center\u0026apos;s (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)\n\nA flaw was found in Samba\u0026apos;s internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)\n\nSamba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)\n\nA security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the \u0026quot;msKds-RootKeyData\u0026quot; attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)\n\nAn undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)\n\nA security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)",
"id": "OESA-2026-3367",
"modified": "2026-08-13T14:01:48Z",
"published": "2026-08-13T14:01:48Z",
"references": [
{
"type": "ADVISORY",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3367"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58216"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58218"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58221"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58222"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-58224"
},
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6949"
}
],
"schema_version": "1.7.2",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
],
"summary": "samba security update",
"upstream": [
"CVE-2026-58216",
"CVE-2026-58218",
"CVE-2026-58221",
"CVE-2026-58222",
"CVE-2026-58224",
"CVE-2026-6949"
]
}
UBUNTU-CVE-2026-58221 (CVE-2026-58221)
Vulnerability from osv_ubuntu – Published: 2026-07-28 10:00 – Updated: 2026-07-28 18:38 – Source website
VLAI
Details
Samba AD authenticated LDAP access domain takeover. Samba AD low-privilege authenticated LDAP access allows modifications to internal LDB special DNs, which permits a domain takeover.
Severity
N/A (UNKNOWN)
References
| URL | Type | |
|---|---|---|
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "libpam-smbpass",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "libparse-pidl-perl",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "libsmbclient",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "libsmbsharemodes0",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "python-samba",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "samba",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
},
{
"binary_name": "winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "samba",
"purl": "pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:3.6.18-1ubuntu3",
"2:4.0.10+dfsg-4ubuntu2",
"2:4.0.13+dfsg-1ubuntu1",
"2:4.1.3+dfsg-2ubuntu2",
"2:4.1.3+dfsg-2ubuntu3",
"2:4.1.3+dfsg-2ubuntu4",
"2:4.1.3+dfsg-2ubuntu5",
"2:4.1.6+dfsg-1ubuntu1",
"2:4.1.6+dfsg-1ubuntu2",
"2:4.1.6+dfsg-1ubuntu2.14.04.1",
"2:4.1.6+dfsg-1ubuntu2.14.04.2",
"2:4.1.6+dfsg-1ubuntu2.14.04.3",
"2:4.1.6+dfsg-1ubuntu2.14.04.4",
"2:4.1.6+dfsg-1ubuntu2.14.04.5",
"2:4.1.6+dfsg-1ubuntu2.14.04.7",
"2:4.1.6+dfsg-1ubuntu2.14.04.8",
"2:4.1.6+dfsg-1ubuntu2.14.04.9",
"2:4.1.6+dfsg-1ubuntu2.14.04.11",
"2:4.1.6+dfsg-1ubuntu2.14.04.12",
"2:4.1.6+dfsg-1ubuntu2.14.04.13",
"2:4.3.8+dfsg-0ubuntu0.14.04.2",
"2:4.3.9+dfsg-0ubuntu0.14.04.1",
"2:4.3.9+dfsg-0ubuntu0.14.04.3",
"2:4.3.11+dfsg-0ubuntu0.14.04.1",
"2:4.3.11+dfsg-0ubuntu0.14.04.2",
"2:4.3.11+dfsg-0ubuntu0.14.04.3",
"2:4.3.11+dfsg-0ubuntu0.14.04.4",
"2:4.3.11+dfsg-0ubuntu0.14.04.6",
"2:4.3.11+dfsg-0ubuntu0.14.04.7",
"2:4.3.11+dfsg-0ubuntu0.14.04.8",
"2:4.3.11+dfsg-0ubuntu0.14.04.9",
"2:4.3.11+dfsg-0ubuntu0.14.04.10",
"2:4.3.11+dfsg-0ubuntu0.14.04.11",
"2:4.3.11+dfsg-0ubuntu0.14.04.12",
"2:4.3.11+dfsg-0ubuntu0.14.04.13",
"2:4.3.11+dfsg-0ubuntu0.14.04.14",
"2:4.3.11+dfsg-0ubuntu0.14.04.16",
"2:4.3.11+dfsg-0ubuntu0.14.04.17",
"2:4.3.11+dfsg-0ubuntu0.14.04.19",
"2:4.3.11+dfsg-0ubuntu0.14.04.20",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14",
"2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ctdb",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "libparse-pidl-perl",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "libsmbclient",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "python-samba",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "samba",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
},
{
"binary_name": "winbind",
"binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "samba",
"purl": "pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4?arch=source\u0026distro=esm-infra/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:4.1.17+dfsg-4ubuntu2",
"2:4.1.20+dfsg-1ubuntu1",
"2:4.1.20+dfsg-1ubuntu2",
"2:4.1.20+dfsg-1ubuntu3",
"2:4.1.20+dfsg-1ubuntu5",
"2:4.3.3+dfsg-1ubuntu1",
"2:4.3.3+dfsg-1ubuntu2",
"2:4.3.3+dfsg-1ubuntu3",
"2:4.3.6+dfsg-1ubuntu1",
"2:4.3.8+dfsg-0ubuntu1",
"2:4.3.9+dfsg-0ubuntu0.16.04.1",
"2:4.3.9+dfsg-0ubuntu0.16.04.2",
"2:4.3.9+dfsg-0ubuntu0.16.04.3",
"2:4.3.11+dfsg-0ubuntu0.16.04.1",
"2:4.3.11+dfsg-0ubuntu0.16.04.3",
"2:4.3.11+dfsg-0ubuntu0.16.04.5",
"2:4.3.11+dfsg-0ubuntu0.16.04.6",
"2:4.3.11+dfsg-0ubuntu0.16.04.7",
"2:4.3.11+dfsg-0ubuntu0.16.04.8",
"2:4.3.11+dfsg-0ubuntu0.16.04.9",
"2:4.3.11+dfsg-0ubuntu0.16.04.10",
"2:4.3.11+dfsg-0ubuntu0.16.04.11",
"2:4.3.11+dfsg-0ubuntu0.16.04.12",
"2:4.3.11+dfsg-0ubuntu0.16.04.13",
"2:4.3.11+dfsg-0ubuntu0.16.04.15",
"2:4.3.11+dfsg-0ubuntu0.16.04.16",
"2:4.3.11+dfsg-0ubuntu0.16.04.17",
"2:4.3.11+dfsg-0ubuntu0.16.04.18",
"2:4.3.11+dfsg-0ubuntu0.16.04.19",
"2:4.3.11+dfsg-0ubuntu0.16.04.20",
"2:4.3.11+dfsg-0ubuntu0.16.04.21",
"2:4.3.11+dfsg-0ubuntu0.16.04.23",
"2:4.3.11+dfsg-0ubuntu0.16.04.24",
"2:4.3.11+dfsg-0ubuntu0.16.04.25",
"2:4.3.11+dfsg-0ubuntu0.16.04.26",
"2:4.3.11+dfsg-0ubuntu0.16.04.27",
"2:4.3.11+dfsg-0ubuntu0.16.04.28",
"2:4.3.11+dfsg-0ubuntu0.16.04.29",
"2:4.3.11+dfsg-0ubuntu0.16.04.30",
"2:4.3.11+dfsg-0ubuntu0.16.04.31",
"2:4.3.11+dfsg-0ubuntu0.16.04.32",
"2:4.3.11+dfsg-0ubuntu0.16.04.34",
"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1",
"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2",
"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3",
"2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ctdb",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "libparse-pidl-perl",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "libsmbclient",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "python-samba",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "samba",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
},
{
"binary_name": "winbind",
"binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:18.04:LTS",
"name": "samba",
"purl": "pkg:deb/ubuntu/samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3?arch=source\u0026distro=esm-infra/bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:4.6.7+dfsg-1ubuntu3",
"2:4.7.1+dfsg-1ubuntu1",
"2:4.7.3+dfsg-1ubuntu1",
"2:4.7.4+dfsg-1ubuntu1",
"2:4.7.6+dfsg~ubuntu-0ubuntu1",
"2:4.7.6+dfsg~ubuntu-0ubuntu2",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.2",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.4",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.5",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.6",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.7",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.9",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.10",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.13",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.14",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.15",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.16",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.17",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.18",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.19",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.20",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.21",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.23",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.24",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.26",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.27",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.28",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.29",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2",
"2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "ctdb",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "libsmbclient",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "python3-samba",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "samba",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
},
{
"binary_name": "winbind",
"binary_version": "2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:20.04:LTS",
"name": "samba",
"purl": "pkg:deb/ubuntu/samba@2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2?arch=source\u0026distro=esm-infra/focal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:4.10.7+dfsg-0ubuntu2",
"2:4.10.7+dfsg-0ubuntu3",
"2:4.11.1+dfsg-3ubuntu1",
"2:4.11.1+dfsg-3ubuntu2",
"2:4.11.1+dfsg-3ubuntu4",
"2:4.11.5+dfsg-1ubuntu1",
"2:4.11.5+dfsg-1ubuntu2",
"2:4.11.6+dfsg-0ubuntu1",
"2:4.11.6+dfsg-0ubuntu1.1",
"2:4.11.6+dfsg-0ubuntu1.2",
"2:4.11.6+dfsg-0ubuntu1.3",
"2:4.11.6+dfsg-0ubuntu1.4",
"2:4.11.6+dfsg-0ubuntu1.5",
"2:4.11.6+dfsg-0ubuntu1.6",
"2:4.11.6+dfsg-0ubuntu1.8",
"2:4.11.6+dfsg-0ubuntu1.9",
"2:4.11.6+dfsg-0ubuntu1.10",
"2:4.13.14+dfsg-0ubuntu0.20.04.1",
"2:4.13.14+dfsg-0ubuntu0.20.04.2",
"2:4.13.14+dfsg-0ubuntu0.20.04.3",
"2:4.13.14+dfsg-0ubuntu0.20.04.4",
"2:4.13.17~dfsg-0ubuntu0.21.04.1",
"2:4.13.17~dfsg-0ubuntu0.21.04.2",
"2:4.13.17~dfsg-0ubuntu1.20.04.1",
"2:4.13.17~dfsg-0ubuntu1.20.04.2",
"2:4.13.17~dfsg-0ubuntu1.20.04.4",
"2:4.13.17~dfsg-0ubuntu1.20.04.5",
"2:4.15.13+dfsg-0ubuntu0.20.04.1",
"2:4.15.13+dfsg-0ubuntu0.20.04.2",
"2:4.15.13+dfsg-0ubuntu0.20.04.3",
"2:4.15.13+dfsg-0ubuntu0.20.04.4",
"2:4.15.13+dfsg-0ubuntu0.20.04.5",
"2:4.15.13+dfsg-0ubuntu0.20.04.6",
"2:4.15.13+dfsg-0ubuntu0.20.04.7",
"2:4.15.13+dfsg-0ubuntu0.20.04.8",
"2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1",
"2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "ctdb",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "libsmbclient",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "python3-samba",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "samba",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
},
{
"binary_name": "winbind",
"binary_version": "2:4.15.13+dfsg-0ubuntu1.13"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "samba",
"purl": "pkg:deb/ubuntu/samba@2:4.15.13+dfsg-0ubuntu1.13?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.15.13+dfsg-0ubuntu1.13"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:4.13.5+dfsg-2ubuntu2",
"2:4.13.5+dfsg-2ubuntu3",
"2:4.13.14+dfsg-0ubuntu1",
"2:4.13.14+dfsg-0ubuntu2",
"2:4.15.5~dfsg-0ubuntu1",
"2:4.15.5~dfsg-0ubuntu2",
"2:4.15.5~dfsg-0ubuntu4",
"2:4.15.5~dfsg-0ubuntu5",
"2:4.15.5~dfsg-0ubuntu5.1",
"2:4.15.9+dfsg-0ubuntu0.2",
"2:4.15.9+dfsg-0ubuntu0.3",
"2:4.15.13+dfsg-0ubuntu1",
"2:4.15.13+dfsg-0ubuntu1.1",
"2:4.15.13+dfsg-0ubuntu1.2",
"2:4.15.13+dfsg-0ubuntu1.3",
"2:4.15.13+dfsg-0ubuntu1.4",
"2:4.15.13+dfsg-0ubuntu1.5",
"2:4.15.13+dfsg-0ubuntu1.6",
"2:4.15.13+dfsg-0ubuntu1.7",
"2:4.15.13+dfsg-0ubuntu1.8",
"2:4.15.13+dfsg-0ubuntu1.9",
"2:4.15.13+dfsg-0ubuntu1.10",
"2:4.15.13+dfsg-0ubuntu1.12"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "ctdb",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "ldb-tools",
"binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "libldb2",
"binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "libsmbclient0",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "python3-ldb",
"binary_version": "2:2.8.0+samba4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "python3-samba",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba-ad-dc",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba-ad-provision",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "samba-vfs-modules-extra",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
},
{
"binary_name": "winbind",
"binary_version": "2:4.19.5+dfsg-4ubuntu9.7"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "samba",
"purl": "pkg:deb/ubuntu/samba@2:4.19.5+dfsg-4ubuntu9.7?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.19.5+dfsg-4ubuntu9.7"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:4.18.6+dfsg-1ubuntu2",
"2:4.18.6+dfsg-1ubuntu2.1",
"2:4.18.6+dfsg-1ubuntu2.2",
"2:4.19.4+dfsg-3ubuntu1",
"2:4.19.5+dfsg-1ubuntu1",
"2:4.19.5+dfsg-4ubuntu7",
"2:4.19.5+dfsg-4ubuntu8",
"2:4.19.5+dfsg-4ubuntu9",
"2:4.19.5+dfsg-4ubuntu9.2",
"2:4.19.5+dfsg-4ubuntu9.3",
"2:4.19.5+dfsg-4ubuntu9.4",
"2:4.19.5+dfsg-4ubuntu9.6"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "ctdb",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "ldb-tools",
"binary_version": "2:2.11.0+samba4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "libldb2",
"binary_version": "2:2.11.0+samba4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "libnss-winbind",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "libpam-winbind",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "libsmbclient0",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "libtalloc2",
"binary_version": "2:2.4.3+samba4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "libtdb1",
"binary_version": "2:1.4.14+samba4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "libtevent0t64",
"binary_version": "2:0.17.1+samba4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "libwbclient0",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "python3-ldb",
"binary_version": "2:2.11.0+samba4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "python3-samba",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "python3-talloc",
"binary_version": "2:2.4.3+samba4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "python3-tdb",
"binary_version": "2:1.4.14+samba4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "registry-tools",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-ad-dc",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-ad-provision",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-common",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-common-bin",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-dsdb-modules",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-libs",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-testsuite",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-vfs-ceph",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-vfs-glusterfs",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-vfs-modules",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "samba-vfs-modules-extra",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "smbclient",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "tdb-tools",
"binary_version": "2:1.4.14+samba4.23.6+dfsg-1ubuntu2.2"
},
{
"binary_name": "winbind",
"binary_version": "2:4.23.6+dfsg-1ubuntu2.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "samba",
"purl": "pkg:deb/ubuntu/samba@2:4.23.6+dfsg-1ubuntu2.2?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.23.6+dfsg-1ubuntu2.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2:4.22.3+dfsg-4ubuntu2",
"2:4.22.3+dfsg-4ubuntu2.1",
"2:4.22.3+dfsg-4ubuntu3",
"2:4.22.3+dfsg-4ubuntu4",
"2:4.23.4+dfsg-1ubuntu1",
"2:4.23.5+dfsg-1ubuntu2",
"2:4.23.6+dfsg-1ubuntu1",
"2:4.23.6+dfsg-1ubuntu2",
"2:4.23.6+dfsg-1ubuntu2.1"
]
}
],
"aliases": [],
"details": "Samba AD authenticated LDAP access domain takeover. Samba AD low-privilege authenticated LDAP access allows modifications to internal LDB special DNs, which permits a domain takeover.",
"id": "UBUNTU-CVE-2026-58221",
"modified": "2026-07-28T18:38:47Z",
"published": "2026-07-28T10:00:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-58221"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-58221"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-8621-1"
}
],
"related": [
"USN-8621-1"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-58221"
]
}
WID-SEC-W-2026-2549
Vulnerability from csaf_certbund - Published: 2026-07-27 22:00 - Updated: 2026-08-31 22:00Summary
Samba: Mehrere Schwachstellen
Severity
Hoch
Scope
6 vulnerabilities in this advisory, including CVE-2026-58221.
CVE-2026-58221
Known affected: 8 products