A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.
CVSS Details
- CVSS 3.1 Base Score: 9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade samba-winbind-krb5-locatorUpgrade python3-samba-develUpgrade samba-dcerpcUpgrade samba-gpupdateUpgrade samba-common-toolsUpgrade samba-commonUpgrade libldbUpgrade samba-dc-libsUpgrade samba-winexeUpgrade samba-clientUpgrade libsmbclientUpgrade ctdbUpgrade libnetapi-develUpgrade samba-test-libsUpgrade samba-winbind-modulesUpgrade libldb-develUpgrade samba-toolsUpgrade samba-common-libsUpgrade samba-develUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade python3-samba-dcUpgrade libwbclient-develUpgrade samba-libsUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-vfs-iouringUpgrade libnetapiUpgrade python3-sambaUpgrade libwbclientUpgrade sambaUpgrade samba-pidlUpgrade samba-ldb-ldap-modulesUpgrade samba-testUpgrade samba-usersharesUpgrade samba-krb5-printingUpgrade samba-client-libsUpgrade python3-ldbUpgrade ldb-tools | Jun 3, 2026 | Jun 2, 2026 |
| Alpine Linux | — | Upgrade samba | May 29, 2026 | May 26, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libwbclient-develUpgrade samba-libsUpgrade ctdbUpgrade libsmbclient-develUpgrade samba-develUpgrade samba-python-testUpgrade samba-commonUpgrade samba-winbindUpgrade libwbclientUpgrade sambaUpgrade samba-pidlUpgrade samba-pythonUpgrade samba-client-libsUpgrade samba-winbind-modulesUpgrade ctdb-testsUpgrade samba-dcUpgrade libsmbclientUpgrade samba-vfs-glusterfsUpgrade samba-debuginfoUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade samba-krb5-printingUpgrade samba-common-toolsUpgrade samba-client | Jul 8, 2026 | Jul 8, 2026 |
| Amazon_linux_2023 | — | Upgrade samba-dcerpc-debuginfoUpgrade samba-libs-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade sambaUpgrade samba-dc-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-libsUpgrade samba-pidlUpgrade samba-develUpgrade python3-samba-testUpgrade libwbclient-debuginfoUpgrade samba-krb5-printingUpgrade samba-vfs-iouringUpgrade samba-winbindUpgrade samba-ldb-ldap-modulesUpgrade samba-debuginfoUpgrade libwbclientUpgrade python3-samba-dcUpgrade python3-sambaUpgrade samba-commonUpgrade samba-test-libs-debuginfoUpgrade samba-dc-libsUpgrade samba-test-debuginfoUpgrade samba-debugsourceUpgrade samba-toolsUpgrade samba-winbind-debuginfoUpgrade samba-test-libsUpgrade libnetapi-develUpgrade libsmbclient-debuginfoUpgrade libnetapiUpgrade samba-winbind-modules-debuginfoUpgrade samba-client-libsUpgrade python3-samba-develUpgrade samba-testUpgrade libsmbclientUpgrade python3-samba-debuginfoUpgrade samba-common-toolsUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-clientUpgrade samba-common-tools-debuginfoUpgrade samba-dcerpcUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-client-debuginfoUpgrade libwbclient-develUpgrade samba-usersharesUpgrade libnetapi-debuginfoUpgrade samba-krb5-printing-debuginfo | Jun 23, 2026 | May 26, 2026 |
| Debian | — | Upgrade samba | May 27, 2026 | May 27, 2026 |
| Oracle_linux | — | Upgrade samba-test-libsUpgrade samba-toolsUpgrade libnetapi-develUpgrade libwbclient-develUpgrade ctdbUpgrade samba-vfs-glusterfsUpgrade python3-samba-develUpgrade samba-dcerpcUpgrade samba-commonUpgrade samba-pidlUpgrade samba-vfs-iouringUpgrade samba-dc-libsUpgrade samba-testUpgrade samba-common-libsUpgrade libsmbclientUpgrade sambaUpgrade libnetapiUpgrade libsmbclient-develUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-winexeUpgrade samba-winbindUpgrade samba-ldb-ldap-modulesUpgrade python3-samba-dcUpgrade python3-samba-testUpgrade samba-krb5-printingUpgrade libwbclientUpgrade python3-sambaUpgrade samba-develUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-winbind-clientsUpgrade samba-usersharesUpgrade samba-libsUpgrade samba-client-libs | Jun 5, 2026 | May 26, 2026 |
| Redhat_linux | — | Upgrade samba-dcerpc-debuginfoUpgrade libwbclientUpgrade samba-toolsUpgrade libnetapi-debuginfoUpgrade samba-krb5-printingUpgrade samba-test-debuginfoUpgrade libnetapiUpgrade samba-common-toolsUpgrade samba-vfs-glusterfsUpgrade python3-samba-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-ldb-debuginfoUpgrade samba-testUpgrade samba-libs-debuginfoUpgrade samba-commonUpgrade samba-common-tools-debuginfoUpgrade samba-debuginfoUpgrade samba-debugsourceUpgrade samba-winbind-modules-debuginfoUpgrade samba-pidlUpgrade libsmbclient-develUpgrade samba-libsUpgrade python3-samba-dcUpgrade ctdbUpgrade python3-samba-debuginfoUpgrade python3-ldbUpgrade libwbclient-debuginfoUpgrade samba-develNo solution existsUpgrade libldbUpgrade ldb-toolsUpgrade samba-test-libs-debuginfoUpgrade python3-sambaUpgrade samba-clientUpgrade samba-ldb-ldap-modules-debuginfoUpgrade ldb-tools-debuginfoUpgrade samba-test-libsUpgrade samba-ldb-ldap-modulesUpgrade samba-common-libsUpgrade samba-usersharesUpgrade samba-client-debuginfoUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-dcerpcUpgrade samba-pythonUpgrade samba-dc-libs-debuginfoUpgrade sambaUpgrade libldb-develUpgrade samba-winbind-modulesUpgrade samba-vfs-iouring-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libsmbclientUpgrade python3-samba-dc-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-python-testUpgrade samba-client-libsUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-testUpgrade samba-krb5-printing-debuginfoUpgrade libnetapi-develUpgrade samba-vfs-iouringUpgrade samba-gpupdateUpgrade libwbclient-develUpgrade libsmbclient-debuginfoUpgrade samba-winexeUpgrade libldb-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winexe-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade ctdb-testsUpgrade ctdb-debuginfoUpgrade samba-dc | Jun 4, 2026 | May 26, 2026 |
| Rocky_linux | — | Upgrade libsmbclientUpgrade samba-dcerpcUpgrade sambaUpgrade libsmbclient-debuginfoUpgrade samba-client-libsUpgrade libldb-develUpgrade samba-common-toolsUpgrade samba-debuginfoUpgrade samba-vfs-iouringUpgrade samba-winexeUpgrade samba-winbind-modulesUpgrade samba-client-libs-debuginfoUpgrade libldbUpgrade samba-client-debuginfoUpgrade python3-samba-testUpgrade libwbclient-develUpgrade samba-test-libs-debuginfoUpgrade samba-common-libsUpgrade samba-winbindUpgrade libldb-debuginfoUpgrade ctdb-debuginfoUpgrade samba-toolsUpgrade libnetapi-develUpgrade samba-winbind-debuginfoUpgrade samba-usersharesUpgrade samba-winbind-clientsUpgrade ldb-tools-debuginfoUpgrade samba-dc-libsUpgrade python3-samba-dc-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-debugsourceUpgrade samba-vfs-iouring-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-test-debuginfoUpgrade samba-clientUpgrade ldb-toolsUpgrade python3-samba-develUpgrade python3-samba-dcUpgrade samba-krb5-printingUpgrade ctdbUpgrade libsmbclient-develUpgrade libwbclient-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade python3-ldb-debuginfoUpgrade samba-common-libs-debuginfoUpgrade python3-ldbUpgrade libwbclientUpgrade samba-dcerpc-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-clients-debuginfoUpgrade python3-samba-debuginfoUpgrade libnetapiUpgrade samba-winexe-debuginfoUpgrade samba-test-libsUpgrade samba-testUpgrade samba-libs-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade python3-sambaUpgrade samba-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-libs | Jun 17, 2026 | Jun 13, 2026 |
| Suse | — | Upgrade samba-cephUpgrade sambaUpgrade samba-winbind-libsUpgrade libldb-develUpgrade samba-client-libsUpgrade samba-libs-python3Upgrade samba-dcerpcUpgrade samba-gpupdateUpgrade samba-ad-dcUpgrade libsamba-policy-develUpgrade samba-winbind-libs-32bitUpgrade samba-python3Upgrade samba-ad-dc-libsUpgrade samba-libs-python3-32bitUpgrade libldb2-32bitUpgrade samba-ldb-ldapUpgrade samba-winbindUpgrade samba-ad-dc-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-docUpgrade samba-clientUpgrade libsamba-policy0-python3Upgrade libldb2Upgrade samba-testUpgrade samba-client-32bitUpgrade samba-libs-32bitUpgrade samba-develUpgrade samba-client-libs-32bitUpgrade python3-ldbUpgrade samba-devel-32bitUpgrade samba-toolUpgrade samba-libsUpgrade libsamba-policy0-python3-32bitUpgrade samba-dsdb-modulesUpgrade ctdbUpgrade libsamba-policy-python3-develUpgrade ldb-tools | Jun 4, 2026 | May 26, 2026 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient-dev (Ubuntu Pro)Upgrade libwbclient-dev (Ubuntu Pro)Upgrade winbind (Ubuntu Pro)Upgrade libsmbclient (Ubuntu Pro)Upgrade libnss-winbind (Ubuntu Pro)Upgrade samba-libs (Ubuntu Pro)Upgrade samba-dsdb-modules (Ubuntu Pro)Upgrade libwbclient0 (Ubuntu Pro)Upgrade ctdb (Ubuntu Pro)Upgrade registry-tools (Ubuntu Pro)Upgrade samba-common-bin (Ubuntu Pro)Upgrade samba-common (Ubuntu Pro)Upgrade samba (Ubuntu Pro)Upgrade samba-dev (Ubuntu Pro)Upgrade smbclient (Ubuntu Pro)Upgrade python3-samba (Ubuntu Pro)Upgrade libpam-winbind (Ubuntu Pro)Upgrade samba-vfs-modules (Ubuntu Pro) | May 27, 2026 | May 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 22, 2026 | May 26, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub