Description
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | samba | samba 4.15.2, samba 4.14.10, samba 4.13.14 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | samba | 2:4.13.14+dfsg-1 | — |
| Debian 13 | samba | 2:4.13.14+dfsg-1 | — |
| Debian 12 | samba | 2:4.13.14+dfsg-1 | — |
| Debian 11 | samba | 2:4.13.13+dfsg-1~deb11u2 | DSA-5003-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | samba | 2:4.13.14+dfsg-0ubuntu1 | — |
| Ubuntu 20.04 LTS | samba | 2:4.13.14+dfsg-0ubuntu0.20.04.1 | USN-5142-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | samba | No fix yet | — |
| Ubuntu Pro 16.04 LTS | samba | No fix yet | — |
| Ubuntu Pro 14.04 LTS | samba | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | bind-dyndb-ldap | 11.6-2.module+el8.4.0+9328+4ec4e316 | RHSA-2021:5142 |
| RHEL 8 | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2021:5142 |
| RHEL 8 | ipa +15 | 4.9.6-10.module+el8.5.0+13587+92118e57 | RHSA-2021:5142 |
| RHEL 8 | ipa-healthcheck +1 | 0.7-6.module+el8.5.0+11410+91a33fe4 | RHSA-2021:5142 |
| RHEL 8 | opendnssec | 2.1.7-1.module+el8.4.0+9007+5084bdd8 | RHSA-2021:5142 |
| RHEL 8 | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2021:5142 |
| RHEL 8 | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2021:5142 |
| RHEL 8 | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2021:5142 |
| RHEL 8 | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2021:5142 |
| RHEL 8 | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2021:5142 |
| RHEL 8 | slapi-nis | 0.56.6-4.module+el8.5.0+12583+bf7ffcf6 | RHSA-2021:5142 |
| RHEL 8 | softhsm +1 | 2.6.0-5.module+el8.4.0+10227+076cd560 | RHSA-2021:5142 |
| RHEL 7 | ipa +11 | 4.6.8-5.el7_9.10 | RHSA-2021:5195 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8.4 EUS | bind-dyndb-ldap | 11.6-2.module+el8.4.0+9328+4ec4e316 | RHSA-2022:0007 |
| RHEL 8.4 EUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2022:0007 |
| RHEL 8.4 EUS | ipa +15 | 4.9.2-6.module+el8.4.0+13654+33612214 | RHSA-2022:0007 |
| RHEL 8.4 EUS | ipa-healthcheck +1 | 0.7-3.module+el8.4.0+9007+5084bdd8 | RHSA-2022:0007 |
| RHEL 8.4 EUS | opendnssec | 2.1.7-1.module+el8.4.0+9007+5084bdd8 | RHSA-2022:0007 |
| RHEL 8.4 EUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2022:0007 |
| RHEL 8.4 EUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2022:0007 |
| RHEL 8.4 EUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2022:0007 |
| RHEL 8.4 EUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2022:0007 |
| RHEL 8.4 EUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2022:0007 |
| RHEL 8.4 EUS | slapi-nis | 0.56.6-2.1.module+el8.4.0+12579+0538eac8 | RHSA-2022:0007 |
| RHEL 8.4 EUS | softhsm +1 | 2.6.0-5.module+el8.4.0+10227+076cd560 | RHSA-2022:0007 |
| RHEL 8.2 EUS | bind-dyndb-ldap | 11.2-3.module+el8.2.0+4921+923e30d5 | RHSA-2022:0076 |
| RHEL 8.2 EUS | custodia +1 | 0.6.0-3.module+el8.1.0+4098+f286395e | RHSA-2022:0076 |
| RHEL 8.2 EUS | ipa +12 | 4.8.4-12.module+el8.2.0+13684+242c9723 | RHSA-2022:0076 |
| RHEL 8.2 EUS | ipa-healthcheck +1 | 0.4-4.module+el8.2.0+5489+95477d9f | RHSA-2022:0076 |
| RHEL 8.2 EUS | ipa-idoverride-memberof +1 | 0.0.4-6.module+el8.1.0+4098+f286395e | RHSA-2022:0076 |
| RHEL 8.2 EUS | opendnssec | 1.4.14-1.module+el8.1.0+4098+f286395e | RHSA-2022:0076 |
| RHEL 8.2 EUS | python-jwcrypto +1 | 0.5.0-1.module+el8.1.0+4098+f286395e | RHSA-2022:0076 |
| RHEL 8.2 EUS | python-kdcproxy +1 | 0.4-5.module+el8.2.0+4691+a05b2456 | RHSA-2022:0076 |
| RHEL 8.2 EUS | python-qrcode +2 | 5.1-12.module+el8.1.0+4098+f286395e | RHSA-2022:0076 |
| RHEL 8.2 EUS | python-yubico +1 | 1.3.2-9.module+el8.1.0+4098+f286395e | RHSA-2022:0076 |
| RHEL 8.2 EUS | pyusb +1 | 1.0.0-9.module+el8.1.0+4098+f286395e | RHSA-2022:0076 |
| RHEL 8.2 EUS | slapi-nis | 0.56.3-3.module+el8.2.0+13684+242c9723 | RHSA-2022:0076 |
| RHEL 8.2 EUS | softhsm +1 | 2.4.0-4.module+el8.2.0+5779+a38c524f | RHSA-2022:0076 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 8 | bind-dyndb-ldap | 11.6-2.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | custodia +1 | 0.6.0-3.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | ipa-client +14 | 4.9.6-10.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | ipa-healthcheck +1 | 0.7-6.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | opendnssec | 2.1.7-1.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | python3-jwcrypto | 0.5.0-1.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | python3-kdcproxy | 0.4-5.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | python3-pyusb | 1.0.0-9.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | python3-qrcode +1 | 5.1-12.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | python3-yubico | 1.3.2-9.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | slapi-nis | 0.56.6-4.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
| AlmaLinux 8 | softhsm +1 | 2.6.0-5.module_el8.5.0+2603+92118e57 | ALSA-2021:5142 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 8 | bind-dyndb-ldap | 11.6-2.module+el8.4.0+429+6bd33fea | RLSA-2021:5142 |
| Rocky Linux 8 | custodia | 0.6.0-3.module+el8.4.0+429+6bd33fea | RLSA-2021:5142 |
| Rocky Linux 8 | ipa | 4.9.6-10.module+el8.5.0+719+4f06efb6 | RLSA-2021:5142 |
| Rocky Linux 8 | ipa-healthcheck | 0.7-6.module+el8.5.0+674+69615a50 | RLSA-2021:5142 |
| Rocky Linux 8 | opendnssec | 2.1.7-1.module+el8.4.0+429+6bd33fea | RLSA-2021:5142 |
| Rocky Linux 8 | python-jwcrypto | 0.5.0-1.module+el8.4.0+429+6bd33fea | RLSA-2021:5142 |
| Rocky Linux 8 | python-kdcproxy | 0.4-5.module+el8.3.0+244+0b2ae752 | RLSA-2021:5142 |
| Rocky Linux 8 | python-qrcode | 5.1-12.module+el8.4.0+429+6bd33fea | RLSA-2021:5142 |
| Rocky Linux 8 | python-yubico | 1.3.2-9.module+el8.4.0+429+6bd33fea | RLSA-2021:5142 |
| Rocky Linux 8 | pyusb | 1.0.0-9.module+el8.4.0+429+6bd33fea | RLSA-2021:5142 |
| Rocky Linux 8 | slapi-nis | 0.56.6-4.module+el8.5.0+675+61f67439 | RLSA-2021:5142 |
| Rocky Linux 8 | softhsm | 2.6.0-5.module+el8.4.0+429+6bd33fea | RLSA-2021:5142 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP3 | ldb | 2.2.2-3.3.1 | SUSE-SU-2021:3647-1 |
| SLES 15 SP3 | samba | 4.13.13+git.528.140935f8d6a-3.12.1 | SUSE-SU-2021:3647-1 |
| SLES 2 | samba | 4.13.13+git.528.140935f8d6a-3.12.1 | SUSE-SU-2021:3647-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLE Micro 5.1 | ldb | 2.2.2-3.3.1 | SUSE-SU-2021:3647-1 |
| SUSE Enterprise Storage 7 | ldb | 2.2.2-4.6.1 | SUSE-SU-2022:0361-1 |
| SUSE Enterprise Storage 7 | samba | 4.13.13+git.545.5897c2d94f3-3.12.1 | SUSE-SU-2022:0361-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | samba | 4.15.2+git.193.a4d6307f1fd-1.1 | openSUSE-SU-2024:11631-1 |
| openSUSE Leap 15.3 | ldb | 2.2.2-3.3.1 | openSUSE-SU-2021:3647-1 |
| openSUSE Leap 15.3 | samba | 4.13.13+git.528.140935f8d6a-3.12.1 | openSUSE-SU-2021:3647-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | samba | 4.15.2-r0 | — |
| Alpine v3.23 | samba | 4.15.2-r0 | — |
| Alpine v3.22 | samba | 4.15.2-r0 | — |
| Alpine v3.21 | samba | 4.15.2-r0 | — |
| Alpine v3.20 | samba | 4.15.2-r0 | — |
Show 7 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | samba | 4.15.2-r0 | — |
| Alpine v3.18 | samba | 4.15.2-r0 | — |
| Alpine v3.17 | samba | 4.15.2-r0 | — |
| Alpine v3.16 | samba | 4.15.2-r0 | — |
| Alpine v3.15 | samba | 4.15.2-r0 | — |
| Alpine v3.14 | samba | 4.14.12-r0 | — |
| Alpine v3.13 | samba | 4.13.17-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | ipa-client +10 | 4.6.8-5.amzn2.4.2 | ALAS2-2023-2149 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | samba | 4.18.3-1 | — |
| Azure Linux 2 (CBL-Mariner) | samba | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | bind-dyndb-ldap | 11.6-2.module+el8.4.0+20088+3d202164 | ELSA-2021-5142 |
| Oracle Linux 8 | custodia +1 | 0.6.0-3.module+el8.3.0+7868+2151076c | ELSA-2021-5142 |
| Oracle Linux 8 | ipa-client +14 | 4.9.6-10.0.1.module+el8.5.0+20451+6c55862e | ELSA-2021-5142 |
| Oracle Linux 8 | ipa-healthcheck +1 | 0.7-6.module+el8.5.0+20379+1b4496cf | ELSA-2021-5142 |
| Oracle Linux 8 | opendnssec | 2.1.7-1.module+el8.4.0+20088+3d202164 | ELSA-2021-5142 |
| Oracle Linux 8 | python3-jwcrypto | 0.5.0-1.module+el8.3.0+7868+2151076c | ELSA-2021-5142 |
| Oracle Linux 8 | python3-kdcproxy | 0.4-5.module+el8.3.0+7868+2151076c | ELSA-2021-5142 |
| Oracle Linux 8 | python3-pyusb | 1.0.0-9.module+el8.3.0+7868+2151076c | ELSA-2021-5142 |
| Oracle Linux 8 | python3-qrcode +1 | 5.1-12.module+el8.3.0+7868+2151076c | ELSA-2021-5142 |
| Oracle Linux 8 | python3-yubico | 1.3.2-9.module+el8.3.0+7868+2151076c | ELSA-2021-5142 |
| Oracle Linux 8 | slapi-nis | 0.56.6-4.module+el8.5.0+20418+88e16a2c | ELSA-2021-5142 |
| Oracle Linux 8 | softhsm +1 | 2.6.0-5.module+el8.4.0+20161+5ecb5b37 | ELSA-2021-5142 |
| Oracle Linux 7 | ipa-client +10 | 4.6.8-5.0.1.el7_9.10 | ELSA-2021-5195 |
Advisories 18
- RHSA-2022:0076 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- ALSA-2021:5142 Moderate: idm:DL1 security update AlmaLinux Security Advisories · Oct 29, 2026
- WID-SEC-2022-0432 Xerox FreeFlow Print Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2022-0302 Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit Administratorrechten BSI CERT-Bund (WID) · Oct 11, 2026
- RHSA-2021:5195 Red Hat Security Advisory: ipa security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-5142-1 samba vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-5003-1 samba - security update Debian Security (DSA / DLA) · Mar 9, 2026
- RLSA-2021:5142 Moderate: idm:DL1 security update Rocky Linux Security Advisories · Feb 5, 2026
- openSUSE-SU-2024:11631-1 ctdb-4.15.2+git.193.a4d6307f1fd-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:3647-1 Security update for samba and ldb SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:0361-1 Security update for ldb, samba SUSE / openSUSE Security Updates · Feb 4, 2026
- RHSA-2022:0007 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2021:5142 Red Hat Security Advisory: idm:DL1 security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- openSUSE-SU-2021:3647-1 Security update for samba and ldb SUSE / openSUSE Security Updates · May 7, 2025
- WID-SEC-2022-2279 Samba: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 21, 2023
- ALAS2-2023-2149 Important: ipa security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jul 19, 2023
- ELSA-2021-5195 Moderate: ipa security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Dec 17, 2021
- ELSA-2021-5142 Moderate: idm:DL1 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Dec 16, 2021