CVE-2026-58224

Katalog CVE

CVSS 6.5 · Medium EPSS 0,33%

Kerentanan Missing Support for Integrity Check pada samba, redhat enterprise linux. Skor CVSS 3.1 6.5 (Medium) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Rincian

Terbit di NVD

14 Agustus 2026

Terakhir diubah

23 September 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber redhat.com
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-353: Missing Support for Integrity Check

EPSS (30 hari)

0,33% peluang dieksploitasi; lebih tinggi dari 24,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.samba.org/show_bug.cgi?id=16085 issue tracking · mitigasi · advisory vendor
• https://www.samba.org/samba/security/CVE-2026-58224-advisory.html mailing list · advisory vendor
• https://access.redhat.com/security/cve/CVE-2026-58224 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2502720 issue tracking · advisory pihak ketiga