Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| samba | fixed | 2:4.24.5+dfsg-1 | package | |
| samba | ignored | bullseye | package |
Примечания
https://www.samba.org/samba/security/CVE-2026-58221-advisory.html
Связанные уязвимости
ubuntu
4 месяца назад
Samba AD authenticated LDAP access domain takeover. Samba AD low-privilege authenticated LDAP access allows modifications to internal LDB special DNs, which permits a domain takeover.
CVSS3: 8.8
redhat
4 месяца назад
A flaw was found in Samba Active Directory Domain Controller (AD DC). Improper authorization checks allow an authenticated low-privilege domain user to modify internal LDB special records through LDAP. By altering the DSDB module configuration, an attacker can bypass directory ACL enforcement on new LDAP connections and elevate privileges, potentially leading to complete domain compromise.
