Every CVE Search/ Get API key

CVE-2026-4408

Samba: remote code execution in samr

9.0 CriticalPublic exploitFix available

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.50%Up 2.3 points since May 28, 2026
90%50%10%1%

What each source reports

CVE List Score used 9.0

Samba: remote code execution in samr

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Record
CVE-2026-4408
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-78, CWE-78
Updated
2026-11-04
EUVDEUVD-2026-32741 9.0

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Record
EUVD-2026-32741
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-jg8v-92xc-cx65 9.0

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers...

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Record
GHSA-jg8v-92xc-cx65
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
NVD 9.0

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Record
CVE-2026-4408
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-05
OSVALPINE-CVE-2026-4408 9.8

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Record
ALPINE-CVE-2026-4408
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.0

Samba: remote code execution in samr

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Record
CVE-2026-4408
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-05
Show 48 moreShow less
OSVDEBIAN-CVE-2026-4408 9.8

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Record
DEBIAN-CVE-2026-4408
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVOESA-2026-2574 9.0

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.(CVE-2026-3012)

['-------- Forwarded Message --------', 'Date: Tue, 26 May 2026 14:29:50 +0200', 'Reply-To: Stefan Metzmacher <metze () samba org>', 'Release Announcements\n---------------------\n\nThis is a security release in order to address the following defects:\n\no CVE-2026-1933: Missing access checks on reparse point operations\n\n On a share marked "read only = yes" and\n on file handles opened R/O users can set\n or delete the reparse point xattrs on files\n that the user has write-access in the file\n system for.', 'o CVE-2026-2340: WORM vfs module does not block overwrites\n\n The WORM (Write-Once, Read Many) vfs module\n is supposed to lock write access to shared\n files, so they cannot be altered after initial\n writes. It was allowing files to be overwritten\n by renaming a newly created file over a protected\n file.', 'o CVE-2026-3012: auto-enrolment GPO installing CA certificate over http\n without verification\n\n To bootstrap a certificate chain a domain member must\n fetch a certificate without TLS. It was trusting HTTP\n for this when a more secure encrypted LDAP channel\n was also available.', 'o CVE-2026-3238: Denial of service against AD DC WINS server\n\n The WINS server component of the Active\n Directory Domain controller code in Samba\n is vulnerable to a NULL pointer dereference\n and crash caused by a unauthenticated UDP\n packet.', 'server', '"check password script" that has the %u substitution\n character are vulnerable to a remote code execution.', 'o CVE-2026-4480: Unauthenticated Remote Code Execution in Samba printing\n subsystem\n\n Samba print servers with a "print command"\n that has the %J substitution character\n are vulnerable to a Remote Code Execution.', 'Changes\n-------\n\no Douglas Bagnall <douglas.bagnall () catalyst net nz>\n * BUG 15997: CVE-2026-2340\n * BUG 16003: CVE-2026-3012\n * BUG 16033: CVE-2026-4480\n * BUG 16034: CVE-2026-4408\n\no Pavel Kohout <pavel () aisle com>\n * BUG 15997: CVE-2026-2340\n\no Volker Lendecke <vl () samba org>\n * BUG 15992: CVE-2026-1933\n * BUG 16012: CVE-2026-3238\n\no Stefan Metzmacher <metze () samba org>\n * BUG 15992: CVE-2026-1933\n * BUG 16033: CVE-2026-4480\n * BUG 16034: CVE-2026-4408', "has Homedir / In passwd\n\n#######################################\nReporting bugs & Development Discussion\n#######################################\n\nPlease discuss this release on the samba-technical mailing list or by\njoining the #samba-technical:matrix.org matrix room, or\n#samba-technical IRC channel on irc.libera.chat.\n\nIf you do report problems then please try to send high quality\nfeedback. If you don't provide vital information to help us track down\nthe problem then you will…

Record
OESA-2026-2574
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2575 9.0

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.(CVE-2026-3012)

['-------- Forwarded Message --------', 'Date: Tue, 26 May 2026 14:29:50 +0200', 'Reply-To: Stefan Metzmacher <metze () samba org>', 'Release Announcements\n---------------------\n\nThis is a security release in order to address the following defects:\n\no CVE-2026-1933: Missing access checks on reparse point operations\n\n On a share marked "read only = yes" and\n on file handles opened R/O users can set\n or delete the reparse point xattrs on files\n that the user has write-access in the file\n system for.', 'o CVE-2026-2340: WORM vfs module does not block overwrites\n\n The WORM (Write-Once, Read Many) vfs module\n is supposed to lock write access to shared\n files, so they cannot be altered after initial\n writes. It was allowing files to be overwritten\n by renaming a newly created file over a protected\n file.', 'o CVE-2026-3012: auto-enrolment GPO installing CA certificate over http\n without verification\n\n To bootstrap a certificate chain a domain member must\n fetch a certificate without TLS. It was trusting HTTP\n for this when a more secure encrypted LDAP channel\n was also available.', 'o CVE-2026-3238: Denial of service against AD DC WINS server\n\n The WINS server component of the Active\n Directory Domain controller code in Samba\n is vulnerable to a NULL pointer dereference\n and crash caused by a unauthenticated UDP\n packet.', 'server', '"check password script" that has the %u substitution\n character are vulnerable to a remote code execution.', 'o CVE-2026-4480: Unauthenticated Remote Code Execution in Samba printing\n subsystem\n\n Samba print servers with a "print command"\n that has the %J substitution character\n are vulnerable to a Remote Code Execution.', 'Changes\n-------\n\no Douglas Bagnall <douglas.bagnall () catalyst net nz>\n * BUG 15997: CVE-2026-2340\n * BUG 16003: CVE-2026-3012\n * BUG 16033: CVE-2026-4480\n * BUG 16034: CVE-2026-4408\n\no Pavel Kohout <pavel () aisle com>\n * BUG 15997: CVE-2026-2340\n\no Volker Lendecke <vl () samba org>\n * BUG 15992: CVE-2026-1933\n * BUG 16012: CVE-2026-3238\n\no Stefan Metzmacher <metze () samba org>\n * BUG 15992: CVE-2026-1933\n * BUG 16033: CVE-2026-4480\n * BUG 16034: CVE-2026-4408', "has Homedir / In passwd\n\n#######################################\nReporting bugs & Development Discussion\n#######################################\n\nPlease discuss this release on the samba-technical mailing list or by\njoining the #samba-technical:matrix.org matrix room, or\n#samba-technical IRC channel on irc.libera.chat.\n\nIf you do report problems then please try to send high quality\nfeedback. If you don't provide vital information to help us track down\nthe problem then you will…

Record
OESA-2026-2575
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2576 9.0

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

A flaw was found in Samba's certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.(CVE-2026-3012)

['-------- Forwarded Message --------', 'Date: Tue, 26 May 2026 14:29:50 +0200', 'Reply-To: Stefan Metzmacher <metze () samba org>', 'Release Announcements\n---------------------\n\nThis is a security release in order to address the following defects:\n\no CVE-2026-1933: Missing access checks on reparse point operations\n\n On a share marked "read only = yes" and\n on file handles opened R/O users can set\n or delete the reparse point xattrs on files\n that the user has write-access in the file\n system for.', 'o CVE-2026-2340: WORM vfs module does not block overwrites\n\n The WORM (Write-Once, Read Many) vfs module\n is supposed to lock write access to shared\n files, so they cannot be altered after initial\n writes. It was allowing files to be overwritten\n by renaming a newly created file over a protected\n file.', 'o CVE-2026-3012: auto-enrolment GPO installing CA certificate over http\n without verification\n\n To bootstrap a certificate chain a domain member must\n fetch a certificate without TLS. It was trusting HTTP\n for this when a more secure encrypted LDAP channel\n was also available.', 'o CVE-2026-3238: Denial of service against AD DC WINS server\n\n The WINS server component of the Active\n Directory Domain controller code in Samba\n is vulnerable to a NULL pointer dereference\n and crash caused by a unauthenticated UDP\n packet.', 'server', '"check password script" that has the %u substitution\n character are vulnerable to a remote code execution.', 'o CVE-2026-4480: Unauthenticated Remote Code Execution in Samba printing\n subsystem\n\n Samba print servers with a "print command"\n that has the %J substitution character\n are vulnerable to a Remote Code Execution.', 'Changes\n-------\n\no Douglas Bagnall <douglas.bagnall () catalyst net nz>\n * BUG 15997: CVE-2026-2340\n * BUG 16003: CVE-2026-3012\n * BUG 16033: CVE-2026-4480\n * BUG 16034: CVE-2026-4408\n\no Pavel Kohout <pavel () aisle com>\n * BUG 15997: CVE-2026-2340\n\no Volker Lendecke <vl () samba org>\n * BUG 15992: CVE-2026-1933\n * BUG 16012: CVE-2026-3238\n\no Stefan Metzmacher <metze () samba org>\n * BUG 15992: CVE-2026-1933\n * BUG 16033: CVE-2026-4480\n * BUG 16034: CVE-2026-4408', "has Homedir / In passwd\n\n#######################################\nReporting bugs & Development Discussion\n#######################################\n\nPlease discuss this release on the samba-technical mailing list or by\njoining the #samba-technical:matrix.org matrix room, or\n#samba-technical IRC channel on irc.libera.chat.\n\nIf you do report problems then please try to send high quality\nfeedback. If you don't provide vital information to help us track down\nthe problem then you will…

Record
OESA-2026-2576
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2577 9.0

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

['-------- Forwarded Message --------', 'Date: Tue, 26 May 2026 14:29:50 +0200', 'Reply-To: Stefan Metzmacher <metze () samba org>', 'Release Announcements\n---------------------\n\nThis is a security release in order to address the following defects:\n\no CVE-2026-1933: Missing access checks on reparse point operations\n\n On a share marked "read only = yes" and\n on file handles opened R/O users can set\n or delete the reparse point xattrs on files\n that the user has write-access in the file\n system for.', 'o CVE-2026-2340: WORM vfs module does not block overwrites\n\n The WORM (Write-Once, Read Many) vfs module\n is supposed to lock write access to shared\n files, so they cannot be altered after initial\n writes. It was allowing files to be overwritten\n by renaming a newly created file over a protected\n file.', 'o CVE-2026-3012: auto-enrolment GPO installing CA certificate over http\n without verification\n\n To bootstrap a certificate chain a domain member must\n fetch a certificate without TLS. It was trusting HTTP\n for this when a more secure encrypted LDAP channel\n was also available.', 'o CVE-2026-3238: Denial of service against AD DC WINS server\n\n The WINS server component of the Active\n Directory Domain controller code in Samba\n is vulnerable to a NULL pointer dereference\n and crash caused by a unauthenticated UDP\n packet.', 'server', '"check password script" that has the %u substitution\n character are vulnerable to a remote code execution.', 'o CVE-2026-4480: Unauthenticated Remote Code Execution in Samba printing\n subsystem\n\n Samba print servers with a "print command"\n that has the %J substitution character\n are vulnerable to a Remote Code Execution.', 'Changes\n-------\n\no Douglas Bagnall <douglas.bagnall () catalyst net nz>\n * BUG 15997: CVE-2026-2340\n * BUG 16003: CVE-2026-3012\n * BUG 16033: CVE-2026-4480\n * BUG 16034: CVE-2026-4408\n\no Pavel Kohout <pavel () aisle com>\n * BUG 15997: CVE-2026-2340\n\no Volker Lendecke <vl () samba org>\n * BUG 15992: CVE-2026-1933\n * BUG 16012: CVE-2026-3238\n\no Stefan Metzmacher <metze () samba org>\n * BUG 15992: CVE-2026-1933\n * BUG 16033: CVE-2026-4480\n * BUG 16034: CVE-2026-4408', "has Homedir / In passwd\n\n#######################################\nReporting bugs & Development Discussion\n#######################################\n\nPlease discuss this release on the samba-technical mailing list or by\njoining the #samba-technical:matrix.org matrix room, or\n#samba-technical IRC channel on irc.libera.chat.\n\nIf you do report problems then please try to send high quality\nfeedback. If you don't provide vital information to help us track down\nthe problem then you will probably be ignored. All bug reports should\nbe filed under the Samba 4.1 and newer product in the project's Bugzilla\ndatabase (", ').\n\n\n======================================================================\n== Our Code, Our Bugs, Our Responsibility.\n== The Samba Team\n======================================================================\n\n\n\n================\nDownload Details\n================\n\nThe uncompressed tarballs and patch files have been signed\nusing GnuPG (ID…

Record
OESA-2026-2577
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:22644 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:22644
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:22963 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:22963
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25049 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:25049
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:25979 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:25979
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:28053 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:28053
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:28054 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:28054
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:28055 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:28055
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:28056 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:28056
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:28057 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:28057
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:28058 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:28058
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:28132 9.0

Red Hat Security Advisory: samba security update

Record
RHSA-2026:28132
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:22644 9.0

Important: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)

  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)

  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:22644
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:22963 9.0

Critical: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: Missing access check on reparse point operations (CVE-2026-1933)

  • samba: vfs_worm does not block directory modification (CVE-2026-2340)

  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)

  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)

  • ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)

  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:22963
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:25049 9.0

Critical: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: Missing access check on reparse point operations (CVE-2026-1933)

  • samba: vfs_worm does not block directory modification (CVE-2026-2340)

  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)

  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)

  • ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)

  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:25049
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-4408 9.0

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Record
UBUNTU-CVE-2026-4408
CVSS 3.1
9.0 CriticalCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:22644 No score

Important: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:22644
Updated
2026-11-02
OSVALSA-2026:22963 No score

Critical: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: Missing access check on reparse point operations (CVE-2026-1933)
  • samba: vfs_worm does not block directory modification (CVE-2026-2340)
  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  • ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:22963
Updated
2026-11-02
OSVALSA-2026:25049 No score

Critical: samba security update

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.

Security Fix(es):

  • samba: Missing access check on reparse point operations (CVE-2026-1933)
  • samba: vfs_worm does not block directory modification (CVE-2026-2340)
  • samba: group policy certificate enrollment uses http:// without validation (CVE-2026-3012)
  • samba: Samba: Remote Code Execution in printing subsystem via unescaped job description (CVE-2026-4480)
  • ngtcp2: ngtcp2: Denial of service via stack buffer overflow during QUIC handshake (CVE-2026-40170)
  • samba: Remote Code Execution in SAMR (CVE-2026-4408)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:25049
Updated
2026-11-02
OSVAZL-88883 No score

CVE-2026-4408 affecting package samba 4.18.3-2

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-characters. This vulnerability allows an attacker to achieve remote command execution on the affected system. This issue primarily affects non-standard configurations where the "check password script" is used with %u and the samba-dcerpcd service is started as a system service.

Record
AZL-88883
Updated
2026-11-05
OSVCLSA-2026-1781101271 No score

samba: Fix of 2 CVEs

  • CVE-2026-3012: do not trust CA certificates fetched over HTTP in the certificate auto-enrollment GP extension; use only LDAP-derived certificates and skip CAs with no cACertificate attribute
  • CVE-2026-4408: escape shell metacharacters in the client-controlled username before substituting it into the "check password script" via %u, preventing remote command injection
Record
CLSA-2026-1781101271
Updated
2026-11-02
OSVCLSA-2026-1781175722 No score

samba: Fix of CVE-2026-4408

  • CVE-2026-4408: escape shell metacharacters in the client-controlled username before substituting it into the "check password script" via %u, preventing remote command injection
Record
CLSA-2026-1781175722
Updated
2026-11-02
OSVCLSA-2026-1781181291 No score

Fix CVE(s): CVE-2026-4408

  • SECURITY UPDATE: shell injection in "check password script" via %u substitution. Samba did not sanitize or quote the username before substituting it into the configured check password script, allowing crafted usernames containing shell metacharacters to inject arbitrary commands executed by smbd.
    • debian/patches/CVE-2026-4408.patch
    • CVE-2026-4408
Record
CLSA-2026-1781181291
Updated
2026-11-02
OSVCLSA-2026-1781186905 No score

samba: Fix of CVE-2026-4408

  • CVE-2026-4408: escape shell metacharacters in the client-controlled username before substituting it into the "check password script" via %u, preventing remote command injection
Record
CLSA-2026-1781186905
Updated
2026-11-02
OSVCLSA-2026-1781258405 No score

Fix CVE(s): CVE-2026-4408

  • SECURITY UPDATE: remote command execution via unescaped %u in the "check password script" (samr password validation)
    • debian/patches/CVE-2026-4408.patch: reject invalid/dangerous account names, mask and single-quote the username before %u substitution, export SAMBA_CPS_ACCOUNT_NAME, and restrict _samr_ValidatePassword to DCs
    • CVE-2026-4408
Record
CLSA-2026-1781258405
Updated
2026-11-02
OSVCLSA-2026-1781343925 No score

Fix CVE(s): CVE-2026-4408

  • SECURITY UPDATE: remote command execution via unescaped %u in the "check password script" (samr password validation)
    • debian/patches/CVE-2026-4408.patch: reject invalid/dangerous account names, mask and single-quote the username before %u substitution, export SAMBA_CPS_ACCOUNT_NAME, and restrict _samr_ValidatePassword to DCs
    • CVE-2026-4408
Record
CLSA-2026-1781343925
Updated
2026-11-02
OSVCLSA-2026-1781620050 No score

samba: Fix of CVE-2026-4408

  • CVE-2026-4408: fix remote command execution via unescaped %u in 'check password script' (samr); mask/quote the client-supplied username and restrict _samr_ValidatePassword to DCs
Record
CLSA-2026-1781620050
Updated
2026-11-02
OSVCLSA-2026-1781627407 No score

samba: Fix of CVE-2026-4408

  • CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict _samr_ValidatePassword to DCs
Record
CLSA-2026-1781627407
Updated
2026-11-02
OSVCLSA-2026-1782204526 No score

samba: Fix of CVE-2026-4408

  • CVE-2026-4408: deny, mask and/or single-quote the username passed as %u to 'check password script' to prevent remote command injection
Record
CLSA-2026-1782204526
Updated
2026-11-02
OSVCLSA-2026-1782977299 No score

samba: Fix of CVE-2026-4408

  • CVE-2026-4408: escape/mask client-controlled username before %u substitution in 'check password script' to prevent unauthenticated remote command execution; restrict _samr_ValidatePassword to DCs
Record
CLSA-2026-1782977299
Updated
2026-11-02
OSVCLSA-2026-1782977935 No score

samba: Fix of CVE-2026-4408

  • CVE-2026-4408: Escape/mask client-controlled username before %u substitution in 'check password script' to prevent remote command execution; restrict _samr_ValidatePassword to DCs
Record
CLSA-2026-1782977935
Updated
2026-11-02
OSVCLSA-2026-1782988187 No score

samba: Fix of CVE-2026-4408

  • CVE-2026-4408: escape/mask client-controlled username before %u substitution in 'check password script' to prevent unauthenticated remote command execution; restrict _samr_ValidatePassword to DCs
Record
CLSA-2026-1782988187
Updated
2026-11-02
OSVCLSA-2026-1782990961 No score

Fix CVE(s): CVE-2026-4408

  • SECURITY UPDATE: fix remote command execution via unescaped %u in 'check password script'
    • debian/patches/CVE-2026-4408.patch: fix remote command execution via unescaped %u in 'check password script'
    • CVE-2026-4408
Record
CLSA-2026-1782990961
Updated
2026-11-02
OSVopenSUSE-SU-2026:10884-1 No score

ctdb-4.23.8+git.477.f78166bceed-1.1 on GA media

These are all security issues fixed in the ctdb-4.23.8+git.477.f78166bceed-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10884-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20905-1 No score

Security update for samba

This update for samba fixes the following issues

Security issues:

  • CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).
  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).

Changes for samba:

  • network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755).
  • Samba service start times out (SElinux relabel takes too long) (bsc#1259050).
  • samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058).
  • VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667).
  • Updated to 4.22.9
Record
openSUSE-SU-2026:20905-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21540-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
openSUSE-SU-2026:21540-1
Updated
2026-11-02
OSVSUSE-SU-2026:2071-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Record
SUSE-SU-2026:2071-1
Updated
2026-11-02
OSVSUSE-SU-2026:2072-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Record
SUSE-SU-2026:2072-1
Updated
2026-11-02
OSVSUSE-SU-2026:2073-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Record
SUSE-SU-2026:2073-1
Updated
2026-11-02
OSVSUSE-SU-2026:2074-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).
Record
SUSE-SU-2026:2074-1
Updated
2026-11-02
OSVSUSE-SU-2026:2076-1 No score

Security update for samba

This update for samba fixes the following issues

Security issues:

  • CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).
  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).

Non security issue:

  • network:samba:STABLE/samba: 'use-kerberos=desired' broken / Dolphin requires login for Samba shares (bsc#1255755).
  • Generated dynamic profile based on path to special 'printers' share. (bsc#1259441).
  • Fix regression 'use-kerberos=desired' broken doesn't even try to authenticate with kerberos and instead fallsback to NTLM (bsc#1255755).
  • Fix memory leak using cups parsed options and filename allocated when processing end of printing job (bsc#1257200).
  • Fix manpage for 'net offlinejoin requestodj'.
  • Fix 'ctdbd socket' documentation in manpage for smb.conf
  • Fix rpc workers with long living clients from growing server memory keytab and increasing memory used by workers (bsc#1257200).
Record
SUSE-SU-2026:2076-1
Updated
2026-11-02
OSVSUSE-SU-2026:2108-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).

Non security issues:

  • Fix pthreadpool_tevent race conditions accessing both pthreadpool_tevent.jobs list and pthreadpool_tevent.glue_list (bsc#1252963)
Record
SUSE-SU-2026:2108-1
Updated
2026-11-02
OSVSUSE-SU-2026:22045-1 No score

Security update for samba

This update for samba fixes the following issues

Security issues:

  • CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).
  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).

Changes for samba:

  • network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755).
  • Samba service start times out (SElinux relabel takes too long) (bsc#1259050).
  • samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058).
  • VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667).
  • Updated to 4.22.9
Record
SUSE-SU-2026:22045-1
Updated
2026-11-02
OSVSUSE-SU-2026:22080-1 No score

Security update for samba

This update for samba fixes the following issues

Security issues:

  • CVE-2026-1933: Missing access check on reparse point operations (bsc#1261188).
  • CVE-2026-2340: vfs_worm does not block directory modification (bsc#1261158).
  • CVE-2026-3012: group policy certificate enrollment uses http: // without validation (bsc#1261159).
  • CVE-2026-3238: unauthenticated udp packet crashes AD DC nbt server (bsc#1261160).
  • CVE-2026-4408: Remote Code Execution in SAMR (bsc#1261163).
  • CVE-2026-4480: Unauthenticated Remote Code Execution (bsc#1261161).

Changes for samba:

  • network:samba:STABLE/samba: "use-kerberos=desired" broken / Dolphin requires login for Samba shares (bsc#1255755).
  • Samba service start times out (SElinux relabel takes too long) (bsc#1259050).
  • samba-ad-dc-libs packages is missing a DLZ plugin for bind 9.20 (bsc#1249058).
  • VFS_Snapper does not show previous file versions in subdirectories. (bsc#1259667).
  • Updated to 4.22.9
Record
SUSE-SU-2026:22080-1
Updated
2026-11-02

Affected products

Show 17 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
samba
Alpine:v3.23
 4.1.0 up to 4.22.10-r0
4.22.10-r0
samba
Alpine:v3.24
 4.1.0 up to 4.23.8-r0
4.23.8-r0
ctdb
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
libnetapi
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
libnetapi-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
libsmbclient
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
libsmbclient-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
libwbclient
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
libwbclient-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
python3-samba
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
Show 290 moreShow less
Affected packages
PackageAffectedFixed
python3-samba-dc
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
python3-samba-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
python3-samba-test
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-client
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-client-libs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-common
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-common-libs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-common-tools
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-dc-libs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-dcerpc
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-devel
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-krb5-printing
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-ldb-ldap-modules
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-libs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-pidl
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-test
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-test-libs
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-tools
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-usershares
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-vfs-iouring
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-winbind
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-winbind-clients
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-winbind-krb5-locator
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-winbind-modules
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
samba-winexe
AlmaLinux:8
From an advisory covering 5 CVEs
 before 4.19.4-16.el8_10
4.19.4-16.el8_10
ldb-tools
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libldb
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libldb-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libnetapi
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libnetapi-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libsmbclient
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libsmbclient-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libwbclient
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
libwbclient-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
python3-ldb
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
python3-samba
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
python3-samba-dc
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
python3-samba-test
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-client
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-client-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-common
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-common-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-common-tools
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-dc-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-dcerpc
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-devel
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-gpupdate
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-krb5-printing
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-ldb-ldap-modules
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-pidl
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-test
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-test-libs
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-tools
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-usershares
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-vfs-iouring
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winbind
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winbind-clients
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winbind-krb5-locator
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winbind-modules
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
samba-winexe
AlmaLinux:10
From an advisory covering 6 CVEs
 before 4.23.5-109.el10_2
4.23.5-109.el10_2
ldb-tools
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libldb
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libldb-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libnetapi
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libnetapi-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libsmbclient
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libsmbclient-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libwbclient
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
libwbclient-devel
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
python3-ldb
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
python3-samba
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
python3-samba-dc
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
python3-samba-test
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-client
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-client-libs
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-common
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-common-libs
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba-common-tools
AlmaLinux:9
From an advisory covering 6 CVEs
 before 4.23.5-10.el9_8
4.23.5-10.el9_8
samba
Azure Linux:3
 through 4.18.3-2 None known
ctdb
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
libnetapi
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
libnetapi-devel
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
libsmbclient
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
libsmbclient-devel
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
libwbclient
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
libwbclient-devel
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
python3-samba
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
python3-samba-dc
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
python3-samba-devel
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
python3-samba-test
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-client
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-client-libs
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-common
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-common-libs
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-common-tools
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-dc-libs
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-dcerpc
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-devel
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-krb5-printing
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-ldb-ldap-modules
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-libs
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-pidl
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-test
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-test-libs
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-tools
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-usershares
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-vfs-iouring
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-winbind
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-winbind-clients
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-winbind-krb5-locator
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-winbind-modules
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
samba-winexe
TuxCare:CentOS-Stream:8
From an advisory covering 2 CVEs
 before 4.19.4-4.el8.tuxcare.els2
4.19.4-4.el8.tuxcare.els2
ctdb
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
ctdb-tests
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
libsmbclient
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
libsmbclient-devel
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
libwbclient
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
libwbclient-devel
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
python3-samba
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
python3-samba-devel
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
python3-samba-test
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-client
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-client-libs
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-common
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-common-libs
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-common-tools
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-devel
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-krb5-printing
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-libs
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-pidl
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-test
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-test-libs
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-vfs-glusterfs
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-winbind
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-winbind-clients
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-winbind-krb5-locator
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-winbind-modules
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
samba-winexe
TuxCare:CentOS:8.4
 before 4.13.3-5.el8_4.tuxcare.els10
4.13.3-5.el8_4.tuxcare.els10
ctdb
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
libnss-winbind
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
libpam-winbind
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
libsmbclient
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
libsmbclient-dev
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
libwbclient-dev
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
libwbclient0
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
python3-samba
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
registry-tools
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
samba
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
samba-common
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
samba-common-bin
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
samba-dev
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
samba-dsdb-modules
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
samba-libs
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
samba-testsuite
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
samba-vfs-modules
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
smbclient
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
winbind
TuxCare:Ubuntu:20.04
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
2:4.15.13+dfsg-0ubuntu0.20.04.8+tuxcare.els3
ctdb
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
libsmbclient
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
libsmbclient-devel
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
libwbclient
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
libwbclient-devel
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
python3-samba
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
python3-samba-devel
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
python3-samba-test
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
samba
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
samba-client
TuxCare:CentOS:8.5
 before 4.14.5-9.el8_5.tuxcare.els2
4.14.5-9.el8_5.tuxcare.els2
samba
Debian:12
 before 2:4.17.12+dfsg-0+deb12u4, plus listed versions
2:4.17.10+dfsg-0+deb12u12:4.17.10+dfsg-0+deb12u1~bpo11+12:4.17.11+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u1~bpo11+1
Show 8 moreShow less
2:4.17.12+dfsg-0+deb12u22:4.17.12+dfsg-0+deb12u32:4.17.8+dfsg-22:4.17.8+dfsg-2.12:4.17.9+dfsg-0+deb12u12:4.17.9+dfsg-0+deb12u22:4.17.9+dfsg-0+deb12u32:4.17.9+dfsg-0+deb12u3~bpo11+1
2:4.17.12+dfsg-0+deb12u4
samba
Debian:13
 before 2:4.22.8+dfsg-0+deb13u2, plus listed versions
2:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+12:4.22.6+dfsg-0+deb13u12:4.22.6+dfsg-0+deb13u1~bpo12+12:4.22.8+dfsg-0+deb13u1
2:4.22.8+dfsg-0+deb13u2
samba
Debian:14
 before 2:4.24.3+dfsg-1, plus listed versions
2:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+12:4.23.0+dfsg-1
Show 25 moreShow less
2:4.23.0+dfsg-22:4.23.0+dfsg-32:4.23.0~rc1+dfsg-12:4.23.0~rc2+dfsg-12:4.23.0~rc3+dfsg-12:4.23.1+dfsg-12:4.23.2+dfsg-12:4.23.3+dfsg-12:4.23.3+dfsg-1~bpo13+12:4.23.4+dfsg-12:4.23.4+dfsg-1~bpo13+12:4.23.5+dfsg-12:4.23.5+dfsg-1~bpo13+12:4.23.6+dfsg-12:4.23.6+dfsg-22:4.23.6+dfsg-2~bpo13+12:4.24.0+dfsg-12:4.24.0~rc1+dfsg-12:4.24.0~rc1+dfsg-22:4.24.0~rc1+dfsg-32:4.24.0~rc2+dfsg-12:4.24.1+dfsg-12:4.24.2+dfsg-12:4.24.2+dfsg-1~bpo13+12:4.24.3+dfsg-1~bpo13+1
2:4.24.3+dfsg-1
samba
openEuler:22.03-LTS-SP4
From an advisory covering 4 CVEs
 before 4.17.5-15.oe2203sp4
4.17.5-15.oe2203sp4
samba
openEuler:24.03-LTS-SP1
From an advisory covering 4 CVEs
 before 4.19.3-9.oe2403sp1
4.19.3-9.oe2403sp1
samba
openEuler:24.03-LTS-SP3
From an advisory covering 4 CVEs
 before 4.19.3-9.oe2403sp3
4.19.3-9.oe2403sp3
samba
openEuler:20.03-LTS-SP4
From an advisory covering 3 CVEs
 before 4.11.12-38.oe2003sp4
4.11.12-38.oe2003sp4
ctdb-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libnetapi-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libsmbclient-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libwbclient-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba-dc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-client-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-client-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-common-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-common-tools-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-dc-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-dcerpc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-krb5-printing-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-ldb-ldap-modules-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-test-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-test-libs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-vfs-iouring
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-vfs-iouring-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-clients-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-krb5-locator-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-modules-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winexe-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
ctdb
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
ctdb-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libnetapi
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libnetapi-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libsmbclient
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libsmbclient-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libwbclient
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libwbclient-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba-dc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba-dc-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba-test
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-client
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-client-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-client-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-client-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-common
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-common-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-common-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-common-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-common-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-dc-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-dc-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-dcerpc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-dcerpc-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-krb5-printing
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-krb5-printing-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-ldb-ldap-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-ldb-ldap-modules-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-pidl
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-test
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-test-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-test-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-test-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-usershares
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-vfs-iouring-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-clients
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-clients-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-krb5-locator
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-krb5-locator-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winbind-modules-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winexe
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba-winexe-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
ctdb-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libnetapi-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libnetapi-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libsmbclient-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libsmbclient-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libwbclient-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
libwbclient-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba-dc-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
python3-samba-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 5 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:4.19.4-16.el8_10
0:4.19.4-16.el8_10
samba
Rocky Linux:10
From an advisory covering 6 CVEs
 before 0:4.23.5-109.el10_2
0:4.23.5-109.el10_2
samba
Rocky Linux:9
From an advisory covering 6 CVEs
 before 0:4.23.5-10.el9_8
0:4.23.5-10.el9_8
samba
SUSE:Linux Micro 6.2
From an advisory covering 6 CVEs
 before 4.22.9+git.506.22c03ce0781-160000.1.1
4.22.9+git.506.22c03ce0781-160000.1.1
samba
SUSE:Linux Enterprise Server 16.0
From an advisory covering 6 CVEs
 before 4.22.9+git.506.22c03ce0781-160000.1.1
4.22.9+git.506.22c03ce0781-160000.1.1
samba
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 6 CVEs
 before 4.22.9+git.506.22c03ce0781-160000.1.1
4.22.9+git.506.22c03ce0781-160000.1.1
samba
SUSE:Linux Micro 6.2
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3
Show 45 moreShow less
2:4.1.3+dfsg-2ubuntu42:4.1.3+dfsg-2ubuntu52:4.1.6+dfsg-1ubuntu12:4.1.6+dfsg-1ubuntu22:4.1.6+dfsg-1ubuntu2.14.04.12:4.1.6+dfsg-1ubuntu2.14.04.22:4.1.6+dfsg-1ubuntu2.14.04.32:4.1.6+dfsg-1ubuntu2.14.04.42:4.1.6+dfsg-1ubuntu2.14.04.52:4.1.6+dfsg-1ubuntu2.14.04.72:4.1.6+dfsg-1ubuntu2.14.04.82:4.1.6+dfsg-1ubuntu2.14.04.92:4.1.6+dfsg-1ubuntu2.14.04.112:4.1.6+dfsg-1ubuntu2.14.04.122:4.1.6+dfsg-1ubuntu2.14.04.132:4.3.8+dfsg-0ubuntu0.14.04.22:4.3.9+dfsg-0ubuntu0.14.04.12:4.3.9+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.12:4.3.11+dfsg-0ubuntu0.14.04.22:4.3.11+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.42:4.3.11+dfsg-0ubuntu0.14.04.62:4.3.11+dfsg-0ubuntu0.14.04.72:4.3.11+dfsg-0ubuntu0.14.04.82:4.3.11+dfsg-0ubuntu0.14.04.92:4.3.11+dfsg-0ubuntu0.14.04.102:4.3.11+dfsg-0ubuntu0.14.04.112:4.3.11+dfsg-0ubuntu0.14.04.122:4.3.11+dfsg-0ubuntu0.14.04.132:4.3.11+dfsg-0ubuntu0.14.04.142:4.3.11+dfsg-0ubuntu0.14.04.162:4.3.11+dfsg-0ubuntu0.14.04.172:4.3.11+dfsg-0ubuntu0.14.04.192:4.3.11+dfsg-0ubuntu0.14.04.202:4.3.11+dfsg-0ubuntu0.14.04.20+esm12:4.3.11+dfsg-0ubuntu0.14.04.20+esm22:4.3.11+dfsg-0ubuntu0.14.04.20+esm32:4.3.11+dfsg-0ubuntu0.14.04.20+esm42:4.3.11+dfsg-0ubuntu0.14.04.20+esm62:4.3.11+dfsg-0ubuntu0.14.04.20+esm72:4.3.11+dfsg-0ubuntu0.14.04.20+esm82:4.3.11+dfsg-0ubuntu0.14.04.20+esm92:4.3.11+dfsg-0ubuntu0.14.04.20+esm112:4.3.11+dfsg-0ubuntu0.14.04.20+esm12
 None known
samba
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:4.1.17+dfsg-4ubuntu22:4.1.20+dfsg-1ubuntu12:4.1.20+dfsg-1ubuntu22:4.1.20+dfsg-1ubuntu32:4.1.20+dfsg-1ubuntu5
Show 41 moreShow less
2:4.3.3+dfsg-1ubuntu12:4.3.3+dfsg-1ubuntu22:4.3.3+dfsg-1ubuntu32:4.3.6+dfsg-1ubuntu12:4.3.8+dfsg-0ubuntu12:4.3.9+dfsg-0ubuntu0.16.04.12:4.3.9+dfsg-0ubuntu0.16.04.22:4.3.9+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.12:4.3.11+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.52:4.3.11+dfsg-0ubuntu0.16.04.62:4.3.11+dfsg-0ubuntu0.16.04.72:4.3.11+dfsg-0ubuntu0.16.04.82:4.3.11+dfsg-0ubuntu0.16.04.92:4.3.11+dfsg-0ubuntu0.16.04.102:4.3.11+dfsg-0ubuntu0.16.04.112:4.3.11+dfsg-0ubuntu0.16.04.122:4.3.11+dfsg-0ubuntu0.16.04.132:4.3.11+dfsg-0ubuntu0.16.04.152:4.3.11+dfsg-0ubuntu0.16.04.162:4.3.11+dfsg-0ubuntu0.16.04.172:4.3.11+dfsg-0ubuntu0.16.04.182:4.3.11+dfsg-0ubuntu0.16.04.192:4.3.11+dfsg-0ubuntu0.16.04.202:4.3.11+dfsg-0ubuntu0.16.04.212:4.3.11+dfsg-0ubuntu0.16.04.232:4.3.11+dfsg-0ubuntu0.16.04.242:4.3.11+dfsg-0ubuntu0.16.04.252:4.3.11+dfsg-0ubuntu0.16.04.262:4.3.11+dfsg-0ubuntu0.16.04.272:4.3.11+dfsg-0ubuntu0.16.04.282:4.3.11+dfsg-0ubuntu0.16.04.292:4.3.11+dfsg-0ubuntu0.16.04.302:4.3.11+dfsg-0ubuntu0.16.04.312:4.3.11+dfsg-0ubuntu0.16.04.322:4.3.11+dfsg-0ubuntu0.16.04.342:4.3.11+dfsg-0ubuntu0.16.04.34+esm12:4.3.11+dfsg-0ubuntu0.16.04.34+esm22:4.3.11+dfsg-0ubuntu0.16.04.34+esm32:4.3.11+dfsg-0ubuntu0.16.04.34+esm4
 None known
samba
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:4.6.7+dfsg-1ubuntu32:4.7.1+dfsg-1ubuntu12:4.7.3+dfsg-1ubuntu12:4.7.4+dfsg-1ubuntu12:4.7.6+dfsg~ubuntu-0ubuntu1
Show 27 moreShow less
2:4.7.6+dfsg~ubuntu-0ubuntu22:4.7.6+dfsg~ubuntu-0ubuntu2.22:4.7.6+dfsg~ubuntu-0ubuntu2.42:4.7.6+dfsg~ubuntu-0ubuntu2.52:4.7.6+dfsg~ubuntu-0ubuntu2.62:4.7.6+dfsg~ubuntu-0ubuntu2.72:4.7.6+dfsg~ubuntu-0ubuntu2.92:4.7.6+dfsg~ubuntu-0ubuntu2.102:4.7.6+dfsg~ubuntu-0ubuntu2.112:4.7.6+dfsg~ubuntu-0ubuntu2.132:4.7.6+dfsg~ubuntu-0ubuntu2.142:4.7.6+dfsg~ubuntu-0ubuntu2.152:4.7.6+dfsg~ubuntu-0ubuntu2.162:4.7.6+dfsg~ubuntu-0ubuntu2.172:4.7.6+dfsg~ubuntu-0ubuntu2.182:4.7.6+dfsg~ubuntu-0ubuntu2.192:4.7.6+dfsg~ubuntu-0ubuntu2.202:4.7.6+dfsg~ubuntu-0ubuntu2.212:4.7.6+dfsg~ubuntu-0ubuntu2.232:4.7.6+dfsg~ubuntu-0ubuntu2.242:4.7.6+dfsg~ubuntu-0ubuntu2.262:4.7.6+dfsg~ubuntu-0ubuntu2.272:4.7.6+dfsg~ubuntu-0ubuntu2.282:4.7.6+dfsg~ubuntu-0ubuntu2.292:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm12:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm22:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
 None known
samba
Ubuntu:Pro:20.04:LTS
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2, plus listed versions
2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4
Show 31 moreShow less
2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.12:4.15.13+dfsg-0ubuntu0.20.04.22:4.15.13+dfsg-0ubuntu0.20.04.32:4.15.13+dfsg-0ubuntu0.20.04.42:4.15.13+dfsg-0ubuntu0.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.62:4.15.13+dfsg-0ubuntu0.20.04.72:4.15.13+dfsg-0ubuntu0.20.04.82:4.15.13+dfsg-0ubuntu0.20.04.8+esm1
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
samba
Ubuntu:22.04:LTS
 before 2:4.15.13+dfsg-0ubuntu1.12, plus listed versions
2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1
Show 17 moreShow less
2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu12:4.15.13+dfsg-0ubuntu1.12:4.15.13+dfsg-0ubuntu1.22:4.15.13+dfsg-0ubuntu1.32:4.15.13+dfsg-0ubuntu1.42:4.15.13+dfsg-0ubuntu1.52:4.15.13+dfsg-0ubuntu1.62:4.15.13+dfsg-0ubuntu1.72:4.15.13+dfsg-0ubuntu1.82:4.15.13+dfsg-0ubuntu1.92:4.15.13+dfsg-0ubuntu1.10
2:4.15.13+dfsg-0ubuntu1.12
samba
Ubuntu:24.04:LTS
 before 2:4.19.5+dfsg-4ubuntu9.6, plus listed versions
2:4.18.6+dfsg-1ubuntu22:4.18.6+dfsg-1ubuntu2.12:4.18.6+dfsg-1ubuntu2.22:4.19.4+dfsg-3ubuntu12:4.19.5+dfsg-1ubuntu1
Show 6 moreShow less
2:4.19.5+dfsg-4ubuntu72:4.19.5+dfsg-4ubuntu82:4.19.5+dfsg-4ubuntu92:4.19.5+dfsg-4ubuntu9.22:4.19.5+dfsg-4ubuntu9.32:4.19.5+dfsg-4ubuntu9.4
2:4.19.5+dfsg-4ubuntu9.6
samba
Ubuntu:25.10
 before 2:4.22.3+dfsg-4ubuntu2.4, plus listed versions
2:4.21.4+dfsg-1ubuntu32:4.21.4+dfsg-1ubuntu42:4.21.4+dfsg-1ubuntu52:4.22.2+dfsg-1ubuntu12:4.22.3+dfsg-4ubuntu12:4.22.3+dfsg-4ubuntu22:4.22.3+dfsg-4ubuntu2.12:4.22.3+dfsg-4ubuntu2.2
2:4.22.3+dfsg-4ubuntu2.4
samba
Ubuntu:26.04:LTS
 before 2:4.23.6+dfsg-1ubuntu2.1, plus listed versions
2:4.22.3+dfsg-4ubuntu22:4.22.3+dfsg-4ubuntu2.12:4.22.3+dfsg-4ubuntu32:4.22.3+dfsg-4ubuntu42:4.23.4+dfsg-1ubuntu12:4.23.5+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu12:4.23.6+dfsg-1ubuntu2
2:4.23.6+dfsg-1ubuntu2.1
samba
Ubuntu:Pro:20.04:LTS
From an advisory covering 3 CVEs
 before 2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2, plus listed versions
2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4
Show 31 moreShow less
2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.12:4.15.13+dfsg-0ubuntu0.20.04.22:4.15.13+dfsg-0ubuntu0.20.04.32:4.15.13+dfsg-0ubuntu0.20.04.42:4.15.13+dfsg-0ubuntu0.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.62:4.15.13+dfsg-0ubuntu0.20.04.72:4.15.13+dfsg-0ubuntu0.20.04.82:4.15.13+dfsg-0ubuntu0.20.04.8+esm1
2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
samba
openSUSE:Tumbleweed
From an advisory covering 7 CVEs
 before 4.23.8+git.477.f78166bceed-1.1
4.23.8+git.477.f78166bceed-1.1
samba
openSUSE:Leap 16.0
From an advisory covering 6 CVEs
 before 4.22.9+git.506.22c03ce0781-160000.1.1
4.22.9+git.506.22c03ce0781-160000.1.1
samba
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubSafeBreach-Labs/ForgottenButNotGone2026-08-03

History

History
RecordedChangedSources
affectedCVE List, EUVD, NVD, OSV
factsCVE List, EUVD, OSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-4408 is a critical vulnerability (CVSS 9.0) in Samba, published May 26, 2026. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. Fixed in samba 4.22.10-r0.

References

Show 147 moreShow less
This page doesn't list everything

Left out here: 1,281 package rows, 3 versions and the rest of 4 source descriptions. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 4 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open