CVE-2026-58224

Description

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

Traduire en français

Produits concernés

• Red Hat Ceph Storage 9.2
• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Red Hat Enterprise Linux 7
• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• Red Hat OpenShift Container Platform 4
• Samba samba
• Redhat enterprise linux

Scores CVSS

Faiblesses (CWE)

• CWE-353

Références

• https://access.redhat.com/errata/RHSA-2026:86618
• https://access.redhat.com/security/cve/CVE-2026-58224 Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2502720 Issue TrackingThird Party Advisory
• https://bugzilla.samba.org/show_bug.cgi?id=16085 Issue TrackingMitigationVendor Advisory
• https://www.samba.org/samba/security/CVE-2026-58224-advisory.html Mailing ListVendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories