CVEFinder.io

CVE-2026-58224

🔶 medium
🔍 Scan for this CVE
Summary

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjac

Description

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

CVSS Score
6.5
Medium
EPSS Score
0.3
Exploit Probability
Published Date
2026-08-14
First Seen: 2026-08-15
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 46.8% of all 350,976 vulnerabilities in our database.

#186,869
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Aug 18, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
Red Hat would like to thank Andrew Tridgell, Martin Schwenke (Samba Team), and Tristan Madani (Talence Security) for reporting this issue.
SSVC data provided by CISA
Last Modified 2026-08-26
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE IDs (Weakness Types)
CWE-353

📦 Affected Products 3

Vendor Product Status Affected Versions
samba samba Affected
< 4.2
redhat enterprise_linux Affected
v6.0
redhat enterprise_linux Affected
v7.0

🔗 References 4

https://access.redhat.com/security/cve/CVE-2026-58224
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2502720
Issue Tracking Third Party Advisory
https://bugzilla.samba.org/show_bug.cgi?id=16085
Issue Tracking Mitigation Vendor Advisory
https://www.samba.org/samba/security/CVE-2026-58224-...
Mailing List Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-11861 ⛔ critical 9.6 0.2 A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Direct... 2026-08-20
CVE-2026-13097 ⚠️ high 8.7 0.3 A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attribut... 2026-08-20
CVE-2026-73196 🔶 medium 4.3 0.2 A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversize... 2026-08-20
CVE-2026-73197 ⚠️ high 7.5 0.3 A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form... 2026-08-20
CVE-2026-73198 ⚠️ high 7.5 0.3 A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the `/ipa/i18n_messages` ... 2026-08-20
CVE-2026-19617 🔶 medium 5.5 0.1 A flaw was found in libdm. A local attacker could craft a malicious Logical Volume Manager (LVM) metadata configuration ... 2026-08-14
These CVEs affect the same products