Every CVE Search/ Get API key

CVE-2026-58224

Samba: ctdb fails to do integrity checking of received packets

6.5 MediumFix available

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.34%Down 0.1 points since Aug 15, 2026
90%50%10%1%

What each source reports

CVE List Score used 6.5

Samba: ctdb fails to do integrity checking of received packets

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Record
CVE-2026-58224
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-353
Updated
2026-11-05
EUVDEUVD-2026-58669 6.5

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Record
EUVD-2026-58669
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-05
GitHub AdvisoriesGHSA-ph76-744q-p8fh 6.5

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient...

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Record
GHSA-ph76-744q-p8fh
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-353
Updated
2026-11-02
NVD 6.5

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Record
CVE-2026-58224
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-353
Updated
2026-11-06
OSV 6.5

Samba: ctdb fails to do integrity checking of received packets

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Record
CVE-2026-58224
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-353
Updated
2026-11-07
OSVDEBIAN-CVE-2026-58224 6.5

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Record
DEBIAN-CVE-2026-58224
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-06
Show 25 moreShow less
OSVOESA-2026-3295 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3295
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3296 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3296
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3297 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3297
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3366 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3366
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3367 8.8

samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows.

Security Fix(es):

An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of the allocated buffer. While this out-of-bounds read typically results in a harmless decryption failure, if the read hits unmapped memory, it causes the KDC process to crash. An authenticated attacker can send a specially crafted kpasswd request containing malformed ASN.1 data to trigger the out-of-bounds read, which may cause the KDC process to terminate, resulting in a denial of service.(CVE-2026-58216)

A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.(CVE-2026-58218)

Samba is an open-source implementation of file sharing and printing services for communication between Linux/Unix and Windows systems. CVE-2026-58221 is a security vulnerability in Samba affecting versions before 4.22.10.(CVE-2026-58221)

A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search in a trusted context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain user can exploit these flaws to disclose confidential Active Directory attributes that would normally be inaccessible. The disclosed information may be leveraged to derive sensitive authentication material, potentially leading to privilege escalation and complete domain compromise. For example: In deployments configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData" attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if privileged gMSAs are present.(CVE-2026-58222)

An undisclosed vulnerability exists in Samba affecting versions before 4.22.10.(CVE-2026-58224)

A security vulnerability exists in Samba affecting versions before 4.22.10. The specific vulnerability details have not been publicly disclosed.(CVE-2026-6949)

Record
OESA-2026-3367
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-58224 6.5

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Record
UBUNTU-CVE-2026-58224
CVSS 3.1
6.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-95888 No score

CVE-2026-58224 affecting package samba 4.18.3-2

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Record
AZL-95888
Updated
2026-11-05
OSVCLSA-2026-1787133276 No score

samba: Fix of CVE-2026-58224

  • CVE-2026-58224: add missing integrity checks to CTDB packet parsing: validate field lengths against packet lengths when unmarshalling, handle string NUL-termination edge cases and sanity-check overall packet lengths, preventing denial of service and limited disclosure of adjacent memory
Record
CLSA-2026-1787133276
Updated
2026-11-02
OSVCLSA-2026-1788267403 No score

samba: Fix of CVE-2026-58224

  • CVE-2026-58224: add missing integrity checks to CTDB packet unmarshalling (field lengths vs packet length, string NUL-termination edge cases, array-size sanity) to prevent remote DoS and limited adjacent-memory disclosure over the CTDB private network and event socket
Record
CLSA-2026-1788267403
Updated
2026-11-02
OSVCLSA-2026-1788338370 No score

samba: Fix of CVE-2026-58224

  • CVE-2026-58224: add missing integrity checks to CTDB packet unmarshalling (field lengths vs packet length, string NUL-termination edge cases, array-size sanity) to prevent remote DoS and limited adjacent-memory disclosure over the CTDB private network and event socket
Record
CLSA-2026-1788338370
Updated
2026-11-02
OSVCLSA-2026-1788338379 No score

samba: Fix of CVE-2026-58224

  • CVE-2026-58224: add missing integrity checks to CTDB packet unmarshalling (field lengths vs packet length, string NUL-termination edge cases, array-size sanity) to prevent remote DoS and limited adjacent-memory disclosure over the CTDB private network and event socket
Record
CLSA-2026-1788338379
Updated
2026-11-02
OSVCLSA-2026-1789553469 No score

Fix CVE(s): CVE-2026-58224

  • SECURITY UPDATE: denial of service and limited memory disclosure in CTDB via malformed packets on the CTDB private network and event socket
    • debian/patches/CVE-2026-58224.patch: validate protocol field lengths against the packet length when unmarshalling, bound array element counts by the remaining buffer to avoid out-of-memory allocations, fix string NUL-termination edge cases in ctdb_string_pull() and ctdb_stringn_pull(), and restrict sock_daemon Unix domain sockets to the owning user
    • CVE-2026-58224
Record
CLSA-2026-1789553469
Updated
2026-11-02
OSVopenSUSE-SU-2026:11431-1 No score

ctdb-4.24.5+git.481.dba78dbdea-1.1 on GA media

These are all security issues fixed in the ctdb-4.24.5+git.481.dba78dbdea-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11431-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21475-1 No score

Security update for samba

This update for samba fixes the following issues:

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
openSUSE-SU-2026:21475-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21540-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
openSUSE-SU-2026:21540-1
Updated
2026-11-02
OSVSUSE-SU-2026:22977-1 No score

Security update for samba

This update for samba fixes the following issues:

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:22977-1
Updated
2026-11-02
OSVSUSE-SU-2026:23003-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23003-1
Updated
2026-11-02
OSVSUSE-SU-2026:23129-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23129-1
Updated
2026-11-02
OSVSUSE-SU-2026:23152-1 No score

Security update for samba

This update for samba fixes the following issues:

Update to 4.22.11.

Security issues fixed:

  • CVE-2026-1933: missing access check on reparse point operations allows unauthorized users to modify the user.SmbReparse xattr (bsc#1261188).
  • CVE-2026-2340: WORM vfs module does not block directory modification and allows file changes by any user with write access (bsc#1261158).
  • CVE-2026-3012: auto-enrolment GPO installing CA certificate over http without verification (bsc#1261159).
  • CVE-2026-3238: NULL pointer dereference in the WINS server compoenent of the AD domain controller code can lead to crash via crafted UDP packet (bsc#1261160).
  • CVE-2026-4408: improper escaping allows for remote command execution via the DCE/RPC SAMR server (bsc#1261163).
  • CVE-2026-4480: improper escaping allows for unauthenticated remote code execution via the printing subsystem (bsc#1261161).
  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Other updates and bugfixes:

  • samba-tool: do not complain of no subcommand with -V (bsc#1273189, bso#15770).
  • Add python3-cryptography and python3-requests requirements for samba-python3.
Record
SUSE-SU-2026:23152-1
Updated
2026-11-02
OSVSUSE-SU-2026:3362-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3362-1
Updated
2026-11-02
OSVSUSE-SU-2026:3363-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3363-1
Updated
2026-11-02
OSVSUSE-SU-2026:3364-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3364-1
Updated
2026-11-02
OSVSUSE-SU-2026:3365-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3365-1
Updated
2026-11-02
OSVSUSE-SU-2026:3366-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3366-1
Updated
2026-11-02
OSVSUSE-SU-2026:3367-1 No score

Security update for samba

This update for samba fixes the following issues

  • CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
  • CVE-2026-15779: pam_winbind module with mkhomedir set allows chown of critical system paths without validation (bsc#1271469).
  • CVE-2026-58216: 6-byte heap OOB read in packet parser of the kpasswd service (bsc#1271674).
  • CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before authentication completes (bsc#1271675).
  • CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover (bsc#1271676).
  • CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected attributes (bsc#1271677).
  • CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).
Record
SUSE-SU-2026:3367-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
samba
Azure Linux:3
 through 4.18.3-2 None known
ctdb
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
ldb-tools
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
libldb
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
libldb-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
libnetapi
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
libnetapi-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
libsmbclient
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
libsmbclient-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
libwbclient
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
Show 173 moreShow less
Affected packages
PackageAffectedFixed
libwbclient-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
python3-ldb
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
python3-samba
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
python3-samba-dc
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
python3-samba-test
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-client
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-client-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-common
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-common-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-common-tools
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-dc-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-dcerpc
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-devel
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-gpupdate
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-krb5-printing
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-ldb-ldap-modules
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-pidl
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-test
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-test-libs
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-tools
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-usershares
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-vfs-iouring
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-winbind
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-winbind-clients
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-winbind-krb5-locator
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-winbind-modules
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
samba-winexe
TuxCare:AlmaLinux:9.6
 before 4.21.3-14.el9_6.tuxcare.els8
4.21.3-14.el9_6.tuxcare.els8
ctdb
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
ctdb-tests
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
libsmbclient
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
libsmbclient-devel
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
libwbclient
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
libwbclient-devel
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-client
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-client-libs
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-common
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-common-libs
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-common-tools
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-dc
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-dc-libs
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-devel
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-krb5-printing
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-libs
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-pidl
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-python
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-python-test
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-test
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-test-libs
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-vfs-glusterfs
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-winbind
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-winbind-clients
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-winbind-krb5-locator
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
samba-winbind-modules
TuxCare:OracleLinux:7
 before 4.10.16-25.0.9.el7_9.tuxcare.els12
4.10.16-25.0.9.el7_9.tuxcare.els12
ctdb
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
ctdb-tests
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
libsmbclient
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
libsmbclient-devel
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
libwbclient
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
libwbclient-devel
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-client
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-client-libs
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-common
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-common-libs
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-common-tools
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-dc
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-dc-libs
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-devel
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-krb5-printing
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-libs
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-pidl
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-python
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-python-test
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-test
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-test-libs
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-vfs-glusterfs
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-winbind
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-winbind-clients
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-winbind-krb5-locator
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-winbind-modules
TuxCare:RHEL:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
ctdb
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
ctdb-tests
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
libsmbclient
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
libsmbclient-devel
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
libwbclient
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
libwbclient-devel
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-client
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-client-libs
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-common
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-common-libs
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-common-tools
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-dc
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-dc-libs
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-devel
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-krb5-printing
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-libs
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-pidl
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-python
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-python-test
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-test
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-test-libs
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-vfs-glusterfs
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-winbind
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-winbind-clients
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-winbind-krb5-locator
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
samba-winbind-modules
TuxCare:CentOS:7
 before 4.10.16-25.el7_9.tuxcare.els12
4.10.16-25.el7_9.tuxcare.els12
ctdb
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
libnss-winbind
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
libpam-winbind
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
libsmbclient
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
libsmbclient-dev
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
libwbclient-dev
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
libwbclient0
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
python-samba
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
registry-tools
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
samba
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
samba-common
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
samba-common-bin
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
samba-dev
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
samba-dsdb-modules
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
samba-libs
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
samba-testsuite
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
samba-vfs-modules
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
smbclient
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
winbind
TuxCare:Debian:10
 before 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
samba
Debian:12
 All versions, plus listed versions
2:4.17.10+dfsg-0+deb12u12:4.17.10+dfsg-0+deb12u1~bpo11+12:4.17.11+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u12:4.17.12+dfsg-0+deb12u1~bpo11+1
Show 45 moreShow less
2:4.17.12+dfsg-0+deb12u22:4.17.12+dfsg-0+deb12u32:4.17.12+dfsg-0+deb12u42:4.17.8+dfsg-22:4.17.8+dfsg-2.12:4.17.9+dfsg-0+deb12u12:4.17.9+dfsg-0+deb12u22:4.17.9+dfsg-0+deb12u32:4.17.9+dfsg-0+deb12u3~bpo11+12:4.18.0+dfsg-1~exp12:4.18.0~rc1+dfsg-1exp2:4.18.0~rc2+dfsg-12:4.18.0~rc3+dfsg-12:4.18.0~rc4+dfsg-12:4.18.1+dfsg-1~exp12:4.18.2+dfsg-12:4.18.3+dfsg-12:4.18.3+dfsg-22:4.18.3+dfsg-32:4.18.4+dfsg-12:4.18.4+dfsg-22:4.18.4+dfsg-2~bpo12+12:4.18.5+dfsg-12:4.18.5+dfsg-22:4.18.5+dfsg-2~bpo12+12:4.18.6+dfsg-12:4.18.6+dfsg-1~bpo12+12:4.18.8+dfsg-1~bpo12+12:4.19.0+dfsg-12:4.19.0~rc1+dfsg-12:4.19.0~rc1+dfsg-22:4.19.0~rc1+dfsg-32:4.19.0~rc2+dfsg-12:4.19.0~rc4+dfsg-12:4.19.0~rc4+dfsg-22:4.19.1+dfsg-12:4.19.1+dfsg-22:4.19.1+dfsg-32:4.19.1+dfsg-42:4.19.2+dfsg-12:4.19.3+dfsg-12:4.19.3+dfsg-1~bpo12+12:4.19.3+dfsg-22:4.19.4+dfsg-12:4.19.4+dfsg-2
 None known
samba
Debian:13
 before 2:4.22.10+dfsg-0+deb13u2, plus listed versions
2:4.22.10+dfsg-0+deb13u12:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+1
Show 4 moreShow less
2:4.22.6+dfsg-0+deb13u12:4.22.6+dfsg-0+deb13u1~bpo12+12:4.22.8+dfsg-0+deb13u12:4.22.8+dfsg-0+deb13u2
2:4.22.10+dfsg-0+deb13u2
samba
Debian:14
 before 2:4.24.5+dfsg-1, plus listed versions
2:4.22.3+dfsg-42:4.22.4+dfsg-12:4.22.4+dfsg-1~deb13u12:4.22.4+dfsg-1~deb13u1~bpo12+12:4.23.0+dfsg-1
Show 29 moreShow less
2:4.23.0+dfsg-22:4.23.0+dfsg-32:4.23.0~rc1+dfsg-12:4.23.0~rc2+dfsg-12:4.23.0~rc3+dfsg-12:4.23.1+dfsg-12:4.23.2+dfsg-12:4.23.3+dfsg-12:4.23.3+dfsg-1~bpo13+12:4.23.4+dfsg-12:4.23.4+dfsg-1~bpo13+12:4.23.5+dfsg-12:4.23.5+dfsg-1~bpo13+12:4.23.6+dfsg-12:4.23.6+dfsg-22:4.23.6+dfsg-2~bpo13+12:4.24.0+dfsg-12:4.24.0~rc1+dfsg-12:4.24.0~rc1+dfsg-22:4.24.0~rc1+dfsg-32:4.24.0~rc2+dfsg-12:4.24.1+dfsg-12:4.24.2+dfsg-12:4.24.2+dfsg-1~bpo13+12:4.24.3+dfsg-12:4.24.3+dfsg-1~bpo13+12:4.24.4+dfsg-12:4.24.4+dfsg-1~bpo13+12:4.24.5+dfsg-1~bpo13+1
2:4.24.5+dfsg-1
samba
openEuler:22.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.17.5-17.oe2203sp4
4.17.5-17.oe2203sp4
samba
openEuler:24.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.19.3-10.oe2403sp4
4.19.3-10.oe2403sp4
samba
openEuler:20.03-LTS-SP4
From an advisory covering 6 CVEs
 before 4.11.12-39.oe2003sp4
4.11.12-39.oe2003sp4
samba
openEuler:24.03-LTS-SP1
From an advisory covering 6 CVEs
 before 4.19.3-10.oe2403sp1
4.19.3-10.oe2403sp1
samba
openEuler:24.03-LTS-SP3
From an advisory covering 6 CVEs
 before 4.19.3-10.oe2403sp3
4.19.3-10.oe2403sp3
samba
SUSE:Linux Micro 6.2
From an advisory covering 7 CVEs
 before 4.22.9+git.538.af6cb4fb2e-160000.1.1
4.22.9+git.538.af6cb4fb2e-160000.1.1
samba
SUSE:Linux Micro 6.2
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Server 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1
samba
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150400.3.52.1
4.15.13+git.808.eeca19f5e1-150400.3.52.1
samba
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 7 CVEs
 before 4.21.10+git.533.31d7e5508d-150700.3.29.1
4.21.10+git.533.31d7e5508d-150700.3.29.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP7
From an advisory covering 7 CVEs
 before 4.21.10+git.533.31d7e5508d-150700.3.29.1
4.21.10+git.533.31d7e5508d-150700.3.29.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP6
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 7 CVEs
 before 4.19.8+git.501.67274891bc-150600.3.29.1
4.19.8+git.501.67274891bc-150600.3.29.1
samba
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 7 CVEs
 before 4.17.12+git.581.f49579c6cd-150500.3.42.1
4.17.12+git.581.f49579c6cd-150500.3.42.1
samba
SUSE:Enterprise Storage 7.1
From an advisory covering 7 CVEs
 before 4.15.13+git.808.eeca19f5e1-150300.3.106.1
4.15.13+git.808.eeca19f5e1-150300.3.106.1
samba
SUSE:Linux Enterprise High Availability Extension 12 SP5
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 7 CVEs
 before 4.15.13+git.729.a8ce057e8d-3.109.1
4.15.13+git.729.a8ce057e8d-3.109.1
samba
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3
Show 45 moreShow less
2:4.1.3+dfsg-2ubuntu42:4.1.3+dfsg-2ubuntu52:4.1.6+dfsg-1ubuntu12:4.1.6+dfsg-1ubuntu22:4.1.6+dfsg-1ubuntu2.14.04.12:4.1.6+dfsg-1ubuntu2.14.04.22:4.1.6+dfsg-1ubuntu2.14.04.32:4.1.6+dfsg-1ubuntu2.14.04.42:4.1.6+dfsg-1ubuntu2.14.04.52:4.1.6+dfsg-1ubuntu2.14.04.72:4.1.6+dfsg-1ubuntu2.14.04.82:4.1.6+dfsg-1ubuntu2.14.04.92:4.1.6+dfsg-1ubuntu2.14.04.112:4.1.6+dfsg-1ubuntu2.14.04.122:4.1.6+dfsg-1ubuntu2.14.04.132:4.3.8+dfsg-0ubuntu0.14.04.22:4.3.9+dfsg-0ubuntu0.14.04.12:4.3.9+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.12:4.3.11+dfsg-0ubuntu0.14.04.22:4.3.11+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.42:4.3.11+dfsg-0ubuntu0.14.04.62:4.3.11+dfsg-0ubuntu0.14.04.72:4.3.11+dfsg-0ubuntu0.14.04.82:4.3.11+dfsg-0ubuntu0.14.04.92:4.3.11+dfsg-0ubuntu0.14.04.102:4.3.11+dfsg-0ubuntu0.14.04.112:4.3.11+dfsg-0ubuntu0.14.04.122:4.3.11+dfsg-0ubuntu0.14.04.132:4.3.11+dfsg-0ubuntu0.14.04.142:4.3.11+dfsg-0ubuntu0.14.04.162:4.3.11+dfsg-0ubuntu0.14.04.172:4.3.11+dfsg-0ubuntu0.14.04.192:4.3.11+dfsg-0ubuntu0.14.04.202:4.3.11+dfsg-0ubuntu0.14.04.20+esm12:4.3.11+dfsg-0ubuntu0.14.04.20+esm22:4.3.11+dfsg-0ubuntu0.14.04.20+esm32:4.3.11+dfsg-0ubuntu0.14.04.20+esm42:4.3.11+dfsg-0ubuntu0.14.04.20+esm62:4.3.11+dfsg-0ubuntu0.14.04.20+esm72:4.3.11+dfsg-0ubuntu0.14.04.20+esm82:4.3.11+dfsg-0ubuntu0.14.04.20+esm92:4.3.11+dfsg-0ubuntu0.14.04.20+esm112:4.3.11+dfsg-0ubuntu0.14.04.20+esm12
 None known
samba
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2:4.1.17+dfsg-4ubuntu22:4.1.20+dfsg-1ubuntu12:4.1.20+dfsg-1ubuntu22:4.1.20+dfsg-1ubuntu32:4.1.20+dfsg-1ubuntu5
Show 41 moreShow less
2:4.3.3+dfsg-1ubuntu12:4.3.3+dfsg-1ubuntu22:4.3.3+dfsg-1ubuntu32:4.3.6+dfsg-1ubuntu12:4.3.8+dfsg-0ubuntu12:4.3.9+dfsg-0ubuntu0.16.04.12:4.3.9+dfsg-0ubuntu0.16.04.22:4.3.9+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.12:4.3.11+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.52:4.3.11+dfsg-0ubuntu0.16.04.62:4.3.11+dfsg-0ubuntu0.16.04.72:4.3.11+dfsg-0ubuntu0.16.04.82:4.3.11+dfsg-0ubuntu0.16.04.92:4.3.11+dfsg-0ubuntu0.16.04.102:4.3.11+dfsg-0ubuntu0.16.04.112:4.3.11+dfsg-0ubuntu0.16.04.122:4.3.11+dfsg-0ubuntu0.16.04.132:4.3.11+dfsg-0ubuntu0.16.04.152:4.3.11+dfsg-0ubuntu0.16.04.162:4.3.11+dfsg-0ubuntu0.16.04.172:4.3.11+dfsg-0ubuntu0.16.04.182:4.3.11+dfsg-0ubuntu0.16.04.192:4.3.11+dfsg-0ubuntu0.16.04.202:4.3.11+dfsg-0ubuntu0.16.04.212:4.3.11+dfsg-0ubuntu0.16.04.232:4.3.11+dfsg-0ubuntu0.16.04.242:4.3.11+dfsg-0ubuntu0.16.04.252:4.3.11+dfsg-0ubuntu0.16.04.262:4.3.11+dfsg-0ubuntu0.16.04.272:4.3.11+dfsg-0ubuntu0.16.04.282:4.3.11+dfsg-0ubuntu0.16.04.292:4.3.11+dfsg-0ubuntu0.16.04.302:4.3.11+dfsg-0ubuntu0.16.04.312:4.3.11+dfsg-0ubuntu0.16.04.322:4.3.11+dfsg-0ubuntu0.16.04.342:4.3.11+dfsg-0ubuntu0.16.04.34+esm12:4.3.11+dfsg-0ubuntu0.16.04.34+esm22:4.3.11+dfsg-0ubuntu0.16.04.34+esm32:4.3.11+dfsg-0ubuntu0.16.04.34+esm4
 None known
samba
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2:4.6.7+dfsg-1ubuntu32:4.7.1+dfsg-1ubuntu12:4.7.3+dfsg-1ubuntu12:4.7.4+dfsg-1ubuntu12:4.7.6+dfsg~ubuntu-0ubuntu1
Show 27 moreShow less
2:4.7.6+dfsg~ubuntu-0ubuntu22:4.7.6+dfsg~ubuntu-0ubuntu2.22:4.7.6+dfsg~ubuntu-0ubuntu2.42:4.7.6+dfsg~ubuntu-0ubuntu2.52:4.7.6+dfsg~ubuntu-0ubuntu2.62:4.7.6+dfsg~ubuntu-0ubuntu2.72:4.7.6+dfsg~ubuntu-0ubuntu2.92:4.7.6+dfsg~ubuntu-0ubuntu2.102:4.7.6+dfsg~ubuntu-0ubuntu2.112:4.7.6+dfsg~ubuntu-0ubuntu2.132:4.7.6+dfsg~ubuntu-0ubuntu2.142:4.7.6+dfsg~ubuntu-0ubuntu2.152:4.7.6+dfsg~ubuntu-0ubuntu2.162:4.7.6+dfsg~ubuntu-0ubuntu2.172:4.7.6+dfsg~ubuntu-0ubuntu2.182:4.7.6+dfsg~ubuntu-0ubuntu2.192:4.7.6+dfsg~ubuntu-0ubuntu2.202:4.7.6+dfsg~ubuntu-0ubuntu2.212:4.7.6+dfsg~ubuntu-0ubuntu2.232:4.7.6+dfsg~ubuntu-0ubuntu2.242:4.7.6+dfsg~ubuntu-0ubuntu2.262:4.7.6+dfsg~ubuntu-0ubuntu2.272:4.7.6+dfsg~ubuntu-0ubuntu2.282:4.7.6+dfsg~ubuntu-0ubuntu2.292:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm12:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm22:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3
 None known
samba
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4
Show 32 moreShow less
2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.12:4.15.13+dfsg-0ubuntu0.20.04.22:4.15.13+dfsg-0ubuntu0.20.04.32:4.15.13+dfsg-0ubuntu0.20.04.42:4.15.13+dfsg-0ubuntu0.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.62:4.15.13+dfsg-0ubuntu0.20.04.72:4.15.13+dfsg-0ubuntu0.20.04.82:4.15.13+dfsg-0ubuntu0.20.04.8+esm12:4.15.13+dfsg-0ubuntu0.20.04.8+esm2
 None known
samba
Ubuntu:22.04:LTS
 before 2:4.15.13+dfsg-0ubuntu1.13, plus listed versions
2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1
Show 18 moreShow less
2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu12:4.15.13+dfsg-0ubuntu1.12:4.15.13+dfsg-0ubuntu1.22:4.15.13+dfsg-0ubuntu1.32:4.15.13+dfsg-0ubuntu1.42:4.15.13+dfsg-0ubuntu1.52:4.15.13+dfsg-0ubuntu1.62:4.15.13+dfsg-0ubuntu1.72:4.15.13+dfsg-0ubuntu1.82:4.15.13+dfsg-0ubuntu1.92:4.15.13+dfsg-0ubuntu1.102:4.15.13+dfsg-0ubuntu1.12
2:4.15.13+dfsg-0ubuntu1.13
samba
Ubuntu:24.04:LTS
 before 2:4.19.5+dfsg-4ubuntu9.7, plus listed versions
2:4.18.6+dfsg-1ubuntu22:4.18.6+dfsg-1ubuntu2.12:4.18.6+dfsg-1ubuntu2.22:4.19.4+dfsg-3ubuntu12:4.19.5+dfsg-1ubuntu1
Show 7 moreShow less
2:4.19.5+dfsg-4ubuntu72:4.19.5+dfsg-4ubuntu82:4.19.5+dfsg-4ubuntu92:4.19.5+dfsg-4ubuntu9.22:4.19.5+dfsg-4ubuntu9.32:4.19.5+dfsg-4ubuntu9.42:4.19.5+dfsg-4ubuntu9.6
2:4.19.5+dfsg-4ubuntu9.7
samba
Ubuntu:26.04:LTS
 before 2:4.23.6+dfsg-1ubuntu2.2, plus listed versions
2:4.22.3+dfsg-4ubuntu22:4.22.3+dfsg-4ubuntu2.12:4.22.3+dfsg-4ubuntu32:4.22.3+dfsg-4ubuntu42:4.23.4+dfsg-1ubuntu1
Show 4 moreShow less
2:4.23.5+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu12:4.23.6+dfsg-1ubuntu22:4.23.6+dfsg-1ubuntu2.1
2:4.23.6+dfsg-1ubuntu2.2
samba
openSUSE:Tumbleweed
From an advisory covering 6 CVEs
 before 4.24.5+git.481.dba78dbdea-1.1
4.24.5+git.481.dba78dbdea-1.1
samba
openSUSE:Leap 16.0
From an advisory covering 7 CVEs
 before 4.22.9+git.538.af6cb4fb2e-160000.1.1
4.22.9+git.538.af6cb4fb2e-160000.1.1
samba
openSUSE:Leap 16.0
From an advisory covering 13 CVEs
 before 4.22.11+git.552.66cfeb7de0a-160000.1.1
4.22.11+git.552.66cfeb7de0a-160000.1.1

History

History
RecordedChangedSources
affectedOSV
affectedNVD
productsCVE List, EUVD
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-58224 is a medium vulnerability (CVSS 6.5) in Samba, published July 28, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in ctdb 4.21.3-14.el9_6.tuxcare.els8.

References

Show 60 moreShow less
This page doesn't list everything

Left out here: 132 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open