Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Samba winbind may crash on crafted NTLM request
published 5 months ago
Summary
The winbind part of Samba used in the listed CentOS packages can read past the end of a data buffer when handling certain authentication messages, which may cause the service to stop unexpectedly. An attacker who sends a specially formed request could trigger this crash and disrupt file sharing or login services. Install the latest updates for the affected CentOS Samba packages to prevent the issue.
What to do
- Update centos ctdb to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos ctdb-tests to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos libsmbclient to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos libsmbclient-devel to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos libwbclient to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos libwbclient-devel to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-client to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-client-libs to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-common to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-common-libs to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-common-tools to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-dc to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-dc-libs to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-devel to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-krb5-printing to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-libs to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-pidl to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-python to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-python-test to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-test to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-test-libs to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-vfs-glusterfs to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-winbind to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-winbind-clients to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-winbind-krb5-locator to version 4.10.16-25.el7_9.tuxcare.els2.
- Update centos samba-winbind-modules to version 4.10.16-25.el7_9.tuxcare.els2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:7 | centos | ctdb |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | ctdb-tests |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | libsmbclient |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | libsmbclient-devel |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | libwbclient |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | libwbclient-devel |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-client |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-client-libs |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-common |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-common-libs |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-common-tools |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-dc |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-dc-libs |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-devel |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-krb5-printing |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-libs |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-pidl |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-python |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-python-test |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-test |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-test-libs |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-vfs-glusterfs |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-winbind |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-winbind-clients |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-winbind-krb5-locator |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
| TuxCare:CentOS:7 | centos | samba-winbind-modules |
< 4.10.16-25.el7_9.tuxcare.els2 Fix: upgrade to 4.10.16-25.el7_9.tuxcare.els2
|
Original advisory text
samba: Fix of CVE-2022-2127
- CVE-2022-2127: fix out-of-bounds read in winbindd when performing NTLM
authentication; insufficient lan-manager response length checks could
trigger a winbind crash on a maliciously crafted request
authentication; insufficient lan-manager response length checks could
trigger a winbind crash on a maliciously crafted request
References
Timeline
Published21 May 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1779117827 · OSV
Track software like this
Free during beta