{"action":"Upgrade samba to 2:4.3.6+dfsg-1 or later.","affected":[{"fixed":"2:4.3.6+dfsg-1","introduced":"0"}],"component":"samba","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["2:4.3.6+dfsg-1"],"id":"tcs_01M5NBDASEATGG1CF513JNQ2MD","modified_at":"2026-09-22T07:01:06.188936237Z","published_at":"2016-03-13T22:59:01.797Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2016-0771","https://security-tracker.debian.org/tracker/CVE-2016-0771"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2016-0771#Debian:13/samba","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2016-0771"}],"summary":"The internal DNS server in Samba 4.x before 4.1.23, 4.2.x before 4.2.9, 4.3.x before 4.3.6, and 4.4.x before 4.4.0rc4, when an AD DC is configured, allows remote authenticated users to cause a denial"}