{"action":"Upgrade samba to 2:4.1.22+dfsg-1 or later.","affected":[{"fixed":"2:4.1.22+dfsg-1","introduced":"0"}],"component":"samba","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2:4.1.22+dfsg-1"],"id":"tcs_01M5NB8JPB50ZT3GS2HR25DF4F","modified_at":"2026-09-09T07:01:20.432057879Z","published_at":"2015-12-29T22:59:04.310Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-5330","https://security-tracker.debian.org/tracker/CVE-2015-5330"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-5330","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-5330"}],"summary":"ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string lengths, which allows remote attackers to obtain sensitive in"}