CVEvulnerability
CVE-2026-58224
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-08-14
- Last modified
- 2026-10-21
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-353
Description
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.
Affected configurations
• samba samba (<= 4.2.0)
• redhat enterprise linux 6.0
• redhat enterprise linux 7.0
Related
Weakness · CWE (1)
- CWE-353 Missing Support for Integrity Check weakness
References
- https://access.redhat.com/errata/RHSA-2026:86618 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2026-58224 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2502720 Issue Tracking, Third Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=16085 Issue Tracking, Mitigation, Vendor Advisory
- https://www.samba.org/samba/security/CVE-2026-58224-advisory.html Mailing List, Vendor Advisory