CVE-2026-58216

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description An out-of-bounds read flaw exists in the Kerberos Key Distribution Center (KDC) password change (kpasswd) service. The issue occurs when the server processes a malformed ASN.1-encoded Kerberos password change request, leading to a miscalculation of the structure size and an attempt to read up to six bytes beyond the allocated buffer. While this often results in a decryption failure, reading from unmapped memory can cause the KDC process to crash. An authenticated attacker can exploit this by sending a specially crafted kpasswd request containing malformed ASN.1 data to trigger a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.