CVE-2026-3238

EUVD-2026-35033
A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
Debian logo
Debian Releases
Debian Product
Codename
samba
bookworm
2:4.17.12+dfsg-0+deb12u4
fixed
bookworm (security)
2:4.17.12+dfsg-0+deb12u4
fixed
bullseye
vulnerable
bullseye (security)
2:4.13.13+dfsg-1~deb11u8
fixed
forky
2:4.24.4+dfsg-1
fixed
sid
2:4.24.4+dfsg-1
fixed
trixie
2:4.22.10+dfsg-0+deb13u1
fixed
trixie (security)
2:4.22.8+dfsg-0+deb13u2
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
ctdb
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
ctdb-tests
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
libnetapi
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
libnetapi-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
libnetapi-devel
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
libsmbclient
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
libsmbclient-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
libsmbclient-devel
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
libwbclient
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
libwbclient-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
libwbclient-devel
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
python3-samba
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
python3-samba-dc
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
python3-samba-dc-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
python3-samba-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
python3-samba-devel
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
python3-samba-test
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-client
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-client-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-client-libs
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-client-libs-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-common
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-common-libs
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-common-libs-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-common-tools
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-common-tools-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-dc
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
samba-dc-libs
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-dc-libs-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-dcerpc
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-dcerpc-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-debuginfo
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-debugsource
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-devel
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-krb5-printing
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-krb5-printing-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-ldb-ldap-modules
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-ldb-ldap-modules-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-libs
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-libs-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-pidl
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-python
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
samba-python-test
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
samba-test
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-test-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-test-libs
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-test-libs-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-tools
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-usershares
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-vfs-glusterfs
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
samba-vfs-iouring
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-vfs-iouring-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-winbind
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-winbind-clients
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-winbind-clients-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-winbind-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-winbind-krb5-locator
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-winbind-krb5-locator-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-winbind-modules
Amazon Linux 2
0:4.10.16-24.amzn2.0.7
fixed
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
samba-winbind-modules-debuginfo
Amazon Linux 2023
2:4.17.12-1.amzn2023.0.4
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://access.redhat.com/security/cve/CVE-2026-3238
https://bugzilla.redhat.com/show_bug.cgi?id=2486176
https://www.samba.org/samba/security/CVE-2026-3238.html
https://access.redhat.com/security/cve/CVE-2026-3238
https://bugzilla.redhat.com/show_bug.cgi?id=2486176
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3238.json