Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CTDB and related Debian packages can crash or leak memory
published 1 month ago
Summary
The Debian packages CTDB, libnss-winbind, libpam-winbind, libsmbclient, and libsmbclient-dev may stop working or expose a small amount of memory when they receive specially crafted network packets. This could disrupt services that rely on these components. Install the latest security update from Debian to protect your system.
What to do
- Update debian ctdb to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian libnss-winbind to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian libpam-winbind to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian libsmbclient to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian libsmbclient-dev to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian libwbclient-dev to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian libwbclient0 to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian python-samba to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian registry-tools to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian samba to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian samba-common to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian samba-common-bin to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian samba-dev to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian samba-dsdb-modules to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian samba-libs to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian samba-testsuite to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian samba-vfs-modules to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian smbclient to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
- Update debian winbind to version 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Debian:10 | debian | ctdb |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | libnss-winbind |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | libpam-winbind |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | libsmbclient |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | libsmbclient-dev |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | libwbclient-dev |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | libwbclient0 |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | python-samba |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | registry-tools |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | samba |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | samba-common |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | samba-common-bin |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | samba-dev |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | samba-dsdb-modules |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | samba-libs |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | samba-testsuite |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | samba-vfs-modules |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | smbclient |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
| TuxCare:Debian:10 | debian | winbind |
< 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10 Fix: upgrade to 2:4.9.5+dfsg-5+deb10u5+tuxcare.els10
|
Original advisory text
Fix CVE(s): CVE-2026-58224
* SECURITY UPDATE: denial of service and limited memory disclosure in CTDB
via malformed packets on the CTDB private network and event socket
- debian/patches/CVE-2026-58224.patch: validate protocol field lengths
against the packet length when unmarshalling, bound array element
counts by the remaining buffer to avoid out-of-memory allocations,
fix string NUL-termination edge cases in ctdb_string_pull() and
ctdb_stringn_pull(), and restrict sock_daemon Unix domain sockets to
the owning user
- CVE-2026-58224
via malformed packets on the CTDB private network and event socket
- debian/patches/CVE-2026-58224.patch: validate protocol field lengths
against the packet length when unmarshalling, bound array element
counts by the remaining buffer to avoid out-of-memory allocations,
fix string NUL-termination edge cases in ctdb_string_pull() and
ctdb_stringn_pull(), and restrict sock_daemon Unix domain sockets to
the owning user
- CVE-2026-58224
References
- https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1789553469.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-58224 Vendor Advisory
Timeline
Published16 Sep 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1789553469 · OSV
Track software like this
Free during beta