{"action":"Upgrade samba to 2:4.16.0+dfsg-2 or later.","affected":[{"fixed":"2:4.16.0+dfsg-2","introduced":"0"}],"component":"samba","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["2:4.16.0+dfsg-2"],"id":"tcs_01M5NG9XEYHDCE5EXCVT4W0R60","modified_at":"2026-10-15T08:01:19.091149548Z","published_at":"2022-08-29T15:15:09.250Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-0336","https://security-tracker.debian.org/tracker/CVE-2022-0336"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-0336","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-0336"}],"summary":"The Samba AD DC includes checks when adding service principals names (SPNs) to an account to ensure that SPNs do not alias with those already in the database. Some of these checks are able to be bypas"}