Missing Support for Integrity Check Affecting samba-python3 package, versions <4.15.13+git.808.eeca19f5e1-150400.3.52.1


Severity

Recommended
0.0
high
0
10

Based on SUSE Linux Enterprise Server security rating.

Threat Intelligence

EPSS
0.33% (24th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-SLES154-SAMBAPYTHON3-18386121
  • published29 Jul 2026
  • disclosed28 Jul 2026

Introduced: 28 Jul 2026

CVE-2026-58224  (opens in a new tab)
CWE-353  (opens in a new tab)

How to fix?

Upgrade SLES:15.4 samba-python3 to version 4.15.13+git.808.eeca19f5e1-150400.3.52.1 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream samba-python3 package and not the samba-python3 package as distributed by SLES. See How to fix? for SLES:15.4 relevant fixed versions and status.

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequate bounds checking. A remote attacker with access to the CTDB private network may trigger a denial of service through process crashes or excessive memory consumption and, in limited cases, disclose adjacent memory contents.

CVSS Base Scores

version 3.1