CVE-2026-6949
Aliases:UBUNTU-CVE-2026-6949DEBIAN-CVE-2026-6949
Advisory lineage Upstream: 0 Downstream: 13
Published: 28 Jul 2026, 10:00
Last modified:28 Jul 2026, 21:30
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
28 Jul 2026, 10:00
Published
Vulnerability first disclosed
28 Jul 2026, 21:30
Last Modified
Vulnerability information updated
Description
TSIG packet with name compression can crash DNS. Incorrect size calculations when a TSIG record contains compressed names can lead to a large out-of-bounds write causing the server to crash.
Affected Systems
- debian•samba
all | all | < 2:4.22.10+dfsg-0+deb13u2 | < 2:4.24.5+dfsg-1
- ubuntu•samba
all | < 2:4.15.13+dfsg-0ubuntu1.13 | < 2:4.19.5+dfsg-4ubuntu9.7 | < 2:4.23.6+dfsg-1ubuntu2.2