{"schemaVersion":3,"id":"MGASA-2026-0142","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated samba packages fix security vulnerabilities\n\nAn information leak vulnerability was discovered in Samba's LDAP server.\nDue to missing access control checks, an authenticated but unprivileged\nattacker could discover the names and preserved attributes of deleted\nobjects in the LDAP store. (CVE-2018-14628)\nCommand injection in wins server hook script. (CVE-2025-10230)\nvfs_streams_xattr uninitialized memory write possible. (CVE-2025-9640)","dates":{"published":"2026-05-16T00:52:55.000Z","modified":"2026-05-16T01:00:06.741Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"samba","name":"samba","label":"samba","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/samba","purlType":"rpm","versions":[{"text":"< 4.17.12-1.2.mga9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.17.12-1.2.mga9","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"samba","label":"Samba","category":"server-app"}},"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2026-0142.html","label":"advisories.mageia.org/MGASA-2026-0142.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34672","label":"bugs.mageia.org/show_bug.cgi?id=34672","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2025/10/15/2","label":"www.openwall.com/lists/oss-security/2025/10/15/2","hostname":"www.openwall.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-14628","CVE-2025-10230","CVE-2025-9640"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-05-16T00:52:55.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-05-16T01:00:06.741Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T05:45:12.654Z","stale":false,"partial":false}}