CVE 7.5 HIGH

Samba: denial of service against ad dc wins server_CVE-2026-3238

7.5 / 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the WINS service using specially crafted UDP packets.

Basic Information

ID CVE-2026-3238
Source redhat
Published Jun 8, 2026 at 07:34
Modified Jun 8, 2026 at 07:51

Affected Product

Vendor Red Hat
Product Red Hat Enterprise Linux 10

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.