Samba: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 8.8
  CVE-2026-58222 Public exploit

  Samba: samba ad ldap compare filter injection and trusted-request confusion disclose protected attributes

  A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 30, 2026
• Medium 6.5
  CVE-2026-58224

  Samba: ctdb fails to do integrity checking of received packets

  A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packe…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Aug 14, 2026
• Medium 5.3
  CVE-2026-58216

  Samba: kpasswd service: kpasswd packet that contains malformed asn.1 might cause the server to access 6 bytes of unallocated memory leading server to crash

  An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 30, 2026
• Medium 5.3
  CVE-2026-58218

  Samba: dns signing dos via tkey name cache exhaustion

  A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests w…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  Jul 30, 2026

Revision history

1. 2026-10-20 #11

   Neue Updates von Red Hat aufgenommen

2. 2026-10-12 #10

   Neue Updates von IBM aufgenommen

3. 2026-10-08 #9

   Neue Updates von IBM aufgenommen

4. 2026-08-31 #8

   Neue Updates von Amazon aufgenommen

5. 2026-08-16 #7

   Neue Updates von SUSE und European Union Vulnerability Database aufgenommen

6. 2026-08-11 #6

   Neue Updates von SUSE aufgenommen

7. 2026-08-04 #5

   Neue Updates von Fedora aufgenommen

8. 2026-08-03 #4

   Neue Updates von SUSE aufgenommen

9. 2026-07-30 #3

   Referenz(en) aufgenommen: EUVD-2026-51158, EUVD-2026-51177, EUVD-2026-51128

10. 2026-07-28 #2

    Neue Updates von SUSE, Debian und Ubuntu aufgenommen

11. 2026-07-27 #1

    Initiale Fassung

References

• Samba Release Notes vom 2026-07-27
  https://www.samba.org/samba/history/samba-4.22.11.html
• Samba Release Notes vom 2026-07-27
  https://www.samba.org/samba/history/samba-4.23.10.html
• Samba Release Notes vom 2026-07-27
  https://www.samba.org/samba/history/samba-4.24.5.html
• SUSE Security Update SUSE-SU-2026:3364-1 vom 2026-07-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/028020.html
• Debian Security Advisory DSA-6401 vom 2026-07-28
  https://security-tracker.debian.org/tracker/DSA-6401-1
• SUSE Security Update SUSE-SU-2026:3363-1 vom 2026-07-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/028015.html
• Ubuntu Security Notice USN-8621-1 vom 2026-07-28
  https://ubuntu.com/security/notices/USN-8621-1
• SUSE Security Update SUSE-SU-2026:3366-1 vom 2026-07-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/028016.html
• SUSE Security Update SUSE-SU-2026:3362-1 vom 2026-07-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/028017.html
• SUSE Security Update SUSE-SU-2026:3365-1 vom 2026-07-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/028018.html
• SUSE Security Update SUSE-SU-2026:3367-1 vom 2026-07-28
  https://lists.suse.com/pipermail/sle-security-updates/2026-July/028019.html
• SUSE Security Update SUSE-SU-2026:22977-1 vom 2026-08-03
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028087.html
• Fedora Security Advisory FEDORA-2026-FCD4630C0D vom 2026-08-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-fcd4630c0d
• Fedora Security Advisory FEDORA-2026-3BE8175017 vom 2026-08-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-3be8175017
• Fedora Security Advisory FEDORA-2026-8E7FA96CF3 vom 2026-08-04
  https://bodhi.fedoraproject.org/updates/FEDORA-2026-8e7fa96cf3
• SUSE Security Update SUSE-SU-2026:23003-1 vom 2026-08-12
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028204.html
• SUSE Security Update SUSE-SU-2026:23152-1 vom 2026-08-14
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028299.html
• SUSE Security Update SUSE-SU-2026:23129-1 vom 2026-08-14
  https://lists.suse.com/pipermail/sle-security-updates/2026-August/028317.html
• Amazon Linux Security Advisory ALAS2-2026-3886 vom 2026-09-01
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3886.html
• IBM Security Bulletin 7291687 vom 2026-10-08
  https://www.ibm.com/support/pages/node/7291687
• IBM Security Bulletin 7292164 vom 2026-10-13
  https://www.ibm.com/support/pages/node/7292164
• Red Hat Security Advisory RHSA-2026:86618 vom 2026-10-21
  https://access.redhat.com/errata/RHSA-2026:86618