Detections
Analytics

Echo: samba: security update to 2:4.22.10+dfsg-0+deb13u2

high Tenable Cloud Security Plugin ID 459029

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A security flaw combining LDAP filter injection and improper authorization checks was found in Samba
 Active Directory Domain Controller (AD DC). When processing LDAP Compare requests, Samba fails to properly
 validate user-supplied attribute names and executes the resulting internal database search in a trusted
 context, bypassing normal Access Control List (ACL) enforcement. An authenticated low-privilege domain
 user can exploit these flaws to disclose confidential Active Directory attributes that would normally be
 inaccessible. The disclosed information may be leveraged to derive sensitive authentication material,
 potentially leading to privilege escalation and complete domain compromise. For example: In deployments
 configured with Group Managed Service Accounts (gMSAs), an attacker can extract the "msKds-RootKeyData"
 attribute and derive gMSA passwords offline, potentially leading to complete domain compromise if
 privileged gMSAs are present. (CVE-2026-58222)

Solution

Update the samba library and its related packages to version 2:4.22.10+dfsg-0+deb13u2 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-58222

Plugin Details

Severity: High

ID: 459029

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.9

Percentile: 58.14

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-58222

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 7.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 7/29/2026

Vulnerability Publication Date: 7/28/2026

Reference Information

CVE: CVE-2026-58222

IAVA: 2026-A-0794