A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jun 9, 2026 | Jun 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade libsmbclientUpgrade samba-clientUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbindUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade libwbclient-develUpgrade samba-dc-libsUpgrade samba-winbind-clientsUpgrade libsmbclient-develUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade samba-dcUpgrade samba-testUpgrade ctdbUpgrade samba-develUpgrade samba-python-testUpgrade samba-pythonUpgrade samba-commonUpgrade samba-debuginfoUpgrade ctdb-tests | Jul 8, 2026 | Jul 8, 2026 |
| Amazon_linux_2023 | — | Upgrade samba-common-libsUpgrade samba-develUpgrade samba-winbind-clientsUpgrade samba-winbind-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbindUpgrade samba-client-libs-debuginfoUpgrade python3-samba-testUpgrade samba-usersharesUpgrade samba-winbind-modules-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade libsmbclient-debuginfoUpgrade samba-dc-libsUpgrade libnetapi-develUpgrade libwbclient-develUpgrade samba-winbind-modulesUpgrade samba-dcerpcUpgrade python3-samba-debuginfoUpgrade sambaUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-libs-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-testUpgrade samba-dcerpc-debuginfoUpgrade python3-samba-dcUpgrade python3-sambaUpgrade libnetapi-debuginfoUpgrade samba-krb5-printingUpgrade samba-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade samba-test-debuginfoUpgrade samba-client-libsUpgrade samba-toolsUpgrade samba-ldb-ldap-modulesUpgrade python3-samba-dc-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-commonUpgrade samba-winbind-clients-debuginfoUpgrade samba-test-libsUpgrade libwbclient-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libnetapiUpgrade libwbclientUpgrade python3-samba-develUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-debugsourceUpgrade samba-common-libs-debuginfoUpgrade samba-libs | Jun 23, 2026 | Jun 8, 2026 |
| Debian | — | Upgrade samba | May 27, 2026 | May 27, 2026 |
| Suse | — | Upgrade libldb2Upgrade samba-client-libsUpgrade samba-ad-dc-libs-32bitUpgrade samba-gpupdateUpgrade sambaUpgrade libldb2-32bitUpgrade libldb-develUpgrade samba-ldb-ldapUpgrade samba-winbind-libs-32bitUpgrade samba-winbindUpgrade samba-libs-32bitUpgrade samba-python3Upgrade samba-ad-dc-libsUpgrade samba-winbind-libsUpgrade samba-libs-python3-32bitUpgrade samba-ad-dcUpgrade samba-cephUpgrade ctdb-pcp-pmdaUpgrade samba-libs-python3Upgrade samba-client-langUpgrade samba-dcerpcUpgrade samba-docUpgrade libsamba-policy0-python3-32bitUpgrade samba-client-libs-32bitUpgrade ctdbUpgrade samba-toolUpgrade libsamba-policy-python3-develUpgrade python3-ldbUpgrade samba-testUpgrade samba-clientUpgrade ldb-toolsUpgrade samba-winbind-libs-langUpgrade samba-devel-32bitUpgrade samba-client-32bitUpgrade samba-dsdb-modulesUpgrade samba-libsUpgrade libsamba-policy0-python3Upgrade samba-develUpgrade libsamba-policy-devel | May 27, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade libsmbclient-dev (Ubuntu Pro)Upgrade sambaUpgrade registry-tools (Ubuntu Pro)Upgrade libwbclient-dev (Ubuntu Pro)Upgrade libnss-winbind (Ubuntu Pro)Upgrade samba-libs (Ubuntu Pro)Upgrade ctdb (Ubuntu Pro)Upgrade samba-vfs-modules (Ubuntu Pro)Upgrade libsmbclient (Ubuntu Pro)Upgrade smbclient (Ubuntu Pro)Upgrade samba-common-bin (Ubuntu Pro)Upgrade winbind (Ubuntu Pro)Upgrade samba-dsdb-modules (Ubuntu Pro)Upgrade samba-dev (Ubuntu Pro)Upgrade samba (Ubuntu Pro)Upgrade python3-samba (Ubuntu Pro)Upgrade libwbclient0 (Ubuntu Pro)Upgrade libpam-winbind (Ubuntu Pro)Upgrade samba-common (Ubuntu Pro) | May 27, 2026 | May 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 13, 2026 | Jun 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub