The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6401 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6401-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     July 28, 2026                         https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : samba     CVE ID         : CVE-2026-6949 CVE-2026-58216 CVE-2026-58218 CVE-2026-58221                      CVE-2026-58222 CVE-2026-58224

    Several vulnerabilities have been discovered in Samba, a SMB/CIFS file,     print, and login server for Unix, which might result in denial of     service, domain takeover, information disclosure or privilege     escalation.

    For the stable distribution (trixie), these problems have been fixed in     version 2:4.22.10+dfsg-0+deb13u2.

    We recommend that you upgrade your samba packages.

    For the detailed security status of samba please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/samba

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3363-1 advisory.

    This update for samba fixes the following issues

    - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
    - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths     without validation       (bsc#1271469).
    - CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).
    - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before     authentication       completes (bsc#1271675).
    - CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover     (bsc#1271676).
    - CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected     attributes       (bsc#1271677).
    - CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3367-1 advisory.

    This update for samba fixes the following issues

    - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
    - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths     without validation       (bsc#1271469).
    - CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).
    - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before     authentication       completes (bsc#1271675).
    - CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover     (bsc#1271676).
    - CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected     attributes       (bsc#1271677).
    - CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of samba installed on the remote host is prior to 4.22.11 / 4.24.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-209-03 advisory.

    New samba packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the samba security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - To calculate the size of a DNS packet region signed by a TSIG record, Samba's internal DNS server     subtracted the presumed size of the TSIG record. In cases where the record used name compression, an     incorrect calculation could be made. Usually this manifests as a signing failure, but in extreme cases the     TSIG record was assumed to be bigger than the entire packet, wrapping the presumed size of the signed     portion to a very large integer. Efforts to copy this portion inevitably hit unallocated memory.
    (CVE-2026-6949)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3364-1 advisory.

    This update for samba fixes the following issues

    - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
    - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths     without validation       (bsc#1271469).
    - CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).
    - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before     authentication       completes (bsc#1271675).
    - CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover     (bsc#1271676).
    - CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected     attributes       (bsc#1271677).
    - CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21475-1 advisory.

    - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
    - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths     without validation       (bsc#1271469).
    - CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).
    - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before     authentication       completes (bsc#1271675).
    - CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover     (bsc#1271676).
    - CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected     attributes       (bsc#1271677).
    - CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3362-1 advisory.

    This update for samba fixes the following issues

    - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
    - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths     without validation       (bsc#1271469).
    - CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).
    - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before     authentication       completes (bsc#1271675).
    - CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover     (bsc#1271676).
    - CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected     attributes       (bsc#1271677).
    - CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3365-1 advisory.

    This update for samba fixes the following issues

    - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server (bsc#1271672).
    - CVE-2026-15779: `pam_winbind` module with `mkhomedir` set allows `chown` of critical system paths     without validation       (bsc#1271469).
    - CVE-2026-58216: 6-byte heap OOB read in packet parser of the `kpasswd` service (bsc#1271674).
    - CVE-2026-58218: DNS TKEY negotiation stores unauthenticated GSS contexts in a fixed FIFO before     authentication       completes (bsc#1271675).
    - CVE-2026-58221: authenticated LDAP access to internal LDB special DNs permits domain takeover     (bsc#1271676).
    - CVE-2026-58222: LDAP Compare filter injection and trusted-request confusion disclose protected     attributes       (bsc#1271677).
    - CVE-2026-58224: heap OOB read due to unchecked packet length fields in CTDB (bsc#1271673).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
330422	Debian dsa-6401 : ctdb - security update	Nessus	Debian Local Security Checks	7/28/2026	7/31/2026	high
330549	SUSE SLED15: ctdb / ldb-tools / libldb-devel / libldb2 / libldb2-32bit / etc (SUSE-SU-2026:3363-1)	Nessus	SuSE Local Security Checks	7/29/2026	7/31/2026	high
330563	SUSE SLES12: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2026:3367-1)	Nessus	SuSE Local Security Checks	7/29/2026	7/31/2026	high
330587	Slackware Linux 15.0 / current samba Multiple Vulnerabilities (SSA:2026-209-03)	Nessus	Slackware Local Security Checks	7/29/2026	7/31/2026	high
330483	Linux Distros Unpatched Vulnerability : CVE-2026-6949	Nessus	Misc.	7/29/2026	7/31/2026	high
330553	SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2026:3364-1)	Nessus	SuSE Local Security Checks	7/29/2026	7/31/2026	high
331556	openSUSE 16: ctdb / ctdb-pcp-pmda / ldb-tools / libldb-devel / libldb2 / etc (openSUSE-SU-2026:21475-1)	Nessus	SuSE Local Security Checks	8/1/2026	8/1/2026	high
330560	SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2026:3362-1)	Nessus	SuSE Local Security Checks	7/29/2026	7/31/2026	high
330538	SUSE SLES15: ctdb / libsamba-policy-devel / libsamba-policy-python3-devel / etc (SUSE-SU-2026:3365-1)	Nessus	SuSE Local Security Checks	7/29/2026	7/31/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high