Description
No description is available for this CVE.
Published: n/a
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

No official description is available for this CVE. Based on the title, a Samba DNS server can crash when it receives a TSIG packet that uses purposely crafted name compression, thereby causing a denial of service. The crash eliminates service availability for all DNS queries processed by the affected server.

Affected Systems

All installations of the Samba DNS server component are potentially vulnerable because no specific version information is provided. Until a vendor update is applied or a workaround is enacted, any Samba DNS server instance that receives external DNS traffic may be at risk.

Risk and Exploitability

The CVSS score of 7.5 indicates high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed exploitation activity from known actors. The likely attack vector is a remote host able to reach the DNS server, which could transmit a specially crafted packet. While the exploitability is not guaranteed, the high impact warrants close monitoring, network perimeter defense, and timely patching.

Generated by OpenCVE AI on August 4, 2026 at 19:15 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Check the Samba project release notes or official advisories for an updated version that addresses TSIG packet processing issues and upgrade if available.
  • If an update cannot be applied immediately, consider disabling TSIG authentication in the Samba DNS configuration to prevent processing of potentially malicious packets.
  • Apply network‑level filtering to detect and drop DNS packets that contain malformed name compression records, such as using firewall rules to block packets that do not conform to standard DNS packet structure.
  • As a defensive measure, isolate the DNS service on a dedicated subnet and restrict inbound DNS traffic to trusted hosts only.

Generated by OpenCVE AI on August 4, 2026 at 19:15 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6401-1 samba security update
Ubuntu USN Ubuntu USN USN-8621-1 Samba vulnerabilities
History

Tue, 04 Aug 2026 09:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Fri, 31 Jul 2026 19:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Thu, 30 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
First Time appeared Samba
Samba samba
Vendors & Products Samba
Samba samba

Thu, 30 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
Description No description is available for this CVE.
Title samba: TSIG packet with crafted name compression can crash DNS server
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}

threat_severity

Important

Subscriptions

Samba Samba
cve-icon MITRE

No data.

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Important

Publid Date: 2026-07-28T10:00:00Z

Links: CVE-2026-6949 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T19:30:05Z

Weaknesses

No weakness.