A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Jun 9, 2026 | Jun 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libwbclient-develUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-winbindUpgrade samba-dcUpgrade samba-krb5-printingUpgrade ctdbUpgrade samba-develUpgrade samba-python-testUpgrade samba-client-libsUpgrade samba-testUpgrade samba-pidlUpgrade samba-vfs-glusterfsUpgrade libwbclientUpgrade samba-commonUpgrade samba-pythonUpgrade samba-debuginfoUpgrade ctdb-tests | Jul 8, 2026 | Jul 8, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-samba-testUpgrade samba-client-libs-debuginfoUpgrade sambaUpgrade python3-samba-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbindUpgrade samba-vfs-iouring-debuginfoUpgrade samba-winbind-debuginfoUpgrade libsmbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-libs-debuginfoUpgrade samba-develUpgrade samba-winbind-clientsUpgrade samba-common-libsUpgrade samba-winbind-modules-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-dc-libsUpgrade samba-clientUpgrade samba-usersharesUpgrade samba-winbind-modulesUpgrade libsmbclient-develUpgrade samba-dcerpcUpgrade samba-common-toolsUpgrade libnetapi-develUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-ldb-ldap-modulesUpgrade libwbclient-debuginfoUpgrade samba-commonUpgrade samba-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-debugsourceUpgrade python3-samba-develUpgrade samba-common-libs-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-testUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade python3-samba-dcUpgrade python3-sambaUpgrade samba-test-libs-debuginfoUpgrade libnetapi-debuginfoUpgrade samba-krb5-printingUpgrade samba-debuginfoUpgrade samba-toolsUpgrade samba-test-debuginfoUpgrade samba-client-libsUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade libwbclientUpgrade libnetapiUpgrade samba-winbind-clients-debuginfo | Jun 23, 2026 | Jun 8, 2026 |
| Debian | — | Upgrade samba | May 27, 2026 | May 27, 2026 |
| Suse | — | Upgrade samba-libs-python3-32bitUpgrade samba-winbind-libsUpgrade samba-client-libsUpgrade libldb2Upgrade samba-winbindUpgrade samba-winbind-libs-32bitUpgrade samba-gpupdateUpgrade samba-cephUpgrade samba-libs-python3Upgrade samba-docUpgrade samba-python3Upgrade samba-client-langUpgrade samba-ad-dcUpgrade samba-libs-32bitUpgrade samba-ad-dc-libs-32bitUpgrade samba-ldb-ldapUpgrade libldb2-32bitUpgrade libldb-develUpgrade ctdb-pcp-pmdaUpgrade sambaUpgrade samba-ad-dc-libsUpgrade samba-dcerpcUpgrade samba-client-libs-32bitUpgrade samba-dsdb-modulesUpgrade samba-testUpgrade samba-devel-32bitUpgrade samba-libsUpgrade samba-winbind-libs-langUpgrade ctdbUpgrade samba-toolUpgrade python3-ldbUpgrade libsamba-policy-python3-develUpgrade samba-develUpgrade libsamba-policy-develUpgrade ldb-toolsUpgrade samba-client-32bitUpgrade samba-clientUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy0-python3 | May 27, 2026 | May 27, 2026 |
| Ubuntu | — | Upgrade ctdb (Ubuntu Pro)Upgrade samba-dsdb-modules (Ubuntu Pro)Upgrade winbind (Ubuntu Pro)Upgrade smbclient (Ubuntu Pro)Upgrade libsmbclient (Ubuntu Pro)Upgrade samba-common-bin (Ubuntu Pro)Upgrade registry-tools (Ubuntu Pro)Upgrade libwbclient-dev (Ubuntu Pro)Upgrade sambaUpgrade libsmbclient-dev (Ubuntu Pro)Upgrade samba-libs (Ubuntu Pro)Upgrade samba-vfs-modules (Ubuntu Pro)Upgrade libnss-winbind (Ubuntu Pro)Upgrade python3-samba (Ubuntu Pro)Upgrade samba-common (Ubuntu Pro)Upgrade libpam-winbind (Ubuntu Pro)Upgrade samba-dev (Ubuntu Pro)Upgrade samba (Ubuntu Pro)Upgrade libwbclient0 (Ubuntu Pro) | May 27, 2026 | May 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 13, 2026 | Jun 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub