MediumFix available
samba — security advisory
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
- Products
- samba
- Affected versions
- 2:4.17.10+dfsg-0+deb12u1, 2:4.17.10+dfsg-0+deb12u1~bpo11+1, 2:4.17.11+dfsg-0+deb12u1, 2:4.17.12+dfsg-0+deb12u1, 2:4.17.12+dfsg-0+deb12u1~bpo11+1, 2:4.17.12+dfsg-0+deb12u2, 2:4.17.12+dfsg-0+deb12u3, 2:4.17.8+dfsg-2, 2:4.17.8+dfsg-2.1, 2:4.17.9+dfsg-0+deb12u1, 2:4.17.9+dfsg-0+deb12u2, 2:4.17.9+dfsg-0+deb12u3, 2:4.17.9+dfsg-0+deb12u3~bpo11+1, 2:4.22.3+dfsg-4, 2:4.22.4+dfsg-1, 2:4.22.4+dfsg-1~deb13u1, 2:4.22.4+dfsg-1~deb13u1~bpo12+1, 2:4.22.6+dfsg-0+deb13u1, 2:4.22.6+dfsg-0+deb13u1~bpo12+1, 2:4.22.8+dfsg-0+deb13u1, 2:4.23.0+dfsg-1, 2:4.23.0+dfsg-2, 2:4.23.0+dfsg-3, 2:4.23.0~rc1+dfsg-1, 2:4.23.0~rc2+dfsg-1, 2:4.23.0~rc3+dfsg-1, 2:4.23.1+dfsg-1, 2:4.23.2+dfsg-1, 2:4.23.3+dfsg-1, 2:4.23.3+dfsg-1~bpo13+1, 2:4.23.4+dfsg-1, 2:4.23.4+dfsg-1~bpo13+1, 2:4.23.5+dfsg-1, 2:4.23.5+dfsg-1~bpo13+1, 2:4.23.6+dfsg-1, 2:4.23.6+dfsg-2, 2:4.23.6+dfsg-2~bpo13+1, 2:4.24.0+dfsg-1, 2:4.24.0~rc1+dfsg-1, 2:4.24.0~rc1+dfsg-2, 2:4.24.0~rc1+dfsg-3, 2:4.24.0~rc2+dfsg-1, 2:4.24.1+dfsg-1, 2:4.24.2+dfsg-1, 2:4.24.2+dfsg-1~bpo13+1, 2:4.24.3+dfsg-1~bpo13+1
- Fixed versions
- 2:4.17.12+dfsg-0+deb12u4, 2:4.22.8+dfsg-0+deb13u2, 2:4.24.3+dfsg-1
- CVEs
- CVE-2026-3012
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 17:53 UTC · Revision 1
Source evidence
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
osv:DEBIAN-CVE-2026-3012
samba
Fixed versions: 2:4.17.12+dfsg-0+deb12u4
samba
Fixed versions: 2:4.22.8+dfsg-0+deb13u2
samba
Fixed versions: 2:4.24.3+dfsg-1
Complete source record
{
"id": "b563a5aca04fcebc1a7d4fc0e35404736c374d0db488392f1b906f1cf6416c9e",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2026-3012",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2026-3012",
"summary": "A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.",
"evidence": "osv:DEBIAN-CVE-2026-3012",
"products": [
{
"name": {
"value": "samba",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:4.17.12+dfsg-0+deb12u4",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "2:4.17.10+dfsg-0+deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.10+dfsg-0+deb12u1~bpo11+1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.11+dfsg-0+deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.12+dfsg-0+deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.12+dfsg-0+deb12u1~bpo11+1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.12+dfsg-0+deb12u2",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.12+dfsg-0+deb12u3",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.8+dfsg-2",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.8+dfsg-2.1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.9+dfsg-0+deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.9+dfsg-0+deb12u2",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.9+dfsg-0+deb12u3",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.9+dfsg-0+deb12u3~bpo11+1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "samba",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:4.22.8+dfsg-0+deb13u2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "2:4.22.3+dfsg-4",
"evidence": "/affected/1/versions"
},
{
"value": "2:4.22.4+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "2:4.22.4+dfsg-1~deb13u1",
"evidence": "/affected/1/versions"
},
{
"value": "2:4.22.4+dfsg-1~deb13u1~bpo12+1",
"evidence": "/affected/1/versions"
},
{
"value": "2:4.22.6+dfsg-0+deb13u1",
"evidence": "/affected/1/versions"
},
{
"value": "2:4.22.6+dfsg-0+deb13u1~bpo12+1",
"evidence": "/affected/1/versions"
},
{
"value": "2:4.22.8+dfsg-0+deb13u1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "samba",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:4.24.3+dfsg-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "2:4.22.3+dfsg-4",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.22.4+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.22.4+dfsg-1~deb13u1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.22.4+dfsg-1~deb13u1~bpo12+1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.0+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.0+dfsg-2",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.0+dfsg-3",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.0~rc1+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.0~rc2+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.0~rc3+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.1+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.2+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.3+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.3+dfsg-1~bpo13+1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.4+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.4+dfsg-1~bpo13+1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.5+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.5+dfsg-1~bpo13+1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.6+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.6+dfsg-2",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.23.6+dfsg-2~bpo13+1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.24.0+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.24.0~rc1+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.24.0~rc1+dfsg-2",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.24.0~rc1+dfsg-3",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.24.0~rc2+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.24.1+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.24.2+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.24.2+dfsg-1~bpo13+1",
"evidence": "/affected/2/versions"
},
{
"value": "2:4.24.3+dfsg-1~bpo13+1",
"evidence": "/affected/2/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "DEBIAN-CVE-2026-3012",
"aliases": [
"DEBIAN-CVE-2026-3012"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.17.12+dfsg-0+deb12u4"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"2:4.17.10+dfsg-0+deb12u1",
"2:4.17.10+dfsg-0+deb12u1~bpo11+1",
"2:4.17.11+dfsg-0+deb12u1",
"2:4.17.12+dfsg-0+deb12u1",
"2:4.17.12+dfsg-0+deb12u1~bpo11+1",
"2:4.17.12+dfsg-0+deb12u2",
"2:4.17.12+dfsg-0+deb12u3",
"2:4.17.8+dfsg-2",
"2:4.17.8+dfsg-2.1",
"2:4.17.9+dfsg-0+deb12u1",
"2:4.17.9+dfsg-0+deb12u2",
"2:4.17.9+dfsg-0+deb12u3",
"2:4.17.9+dfsg-0+deb12u3~bpo11+1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3012.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.22.8+dfsg-0+deb13u2"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"versions": [
"2:4.22.3+dfsg-4",
"2:4.22.4+dfsg-1",
"2:4.22.4+dfsg-1~deb13u1",
"2:4.22.4+dfsg-1~deb13u1~bpo12+1",
"2:4.22.6+dfsg-0+deb13u1",
"2:4.22.6+dfsg-0+deb13u1~bpo12+1",
"2:4.22.8+dfsg-0+deb13u1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3012.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.24.3+dfsg-1"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"2:4.22.3+dfsg-4",
"2:4.22.4+dfsg-1",
"2:4.22.4+dfsg-1~deb13u1",
"2:4.22.4+dfsg-1~deb13u1~bpo12+1",
"2:4.23.0+dfsg-1",
"2:4.23.0+dfsg-2",
"2:4.23.0+dfsg-3",
"2:4.23.0~rc1+dfsg-1",
"2:4.23.0~rc2+dfsg-1",
"2:4.23.0~rc3+dfsg-1",
"2:4.23.1+dfsg-1",
"2:4.23.2+dfsg-1",
"2:4.23.3+dfsg-1",
"2:4.23.3+dfsg-1~bpo13+1",
"2:4.23.4+dfsg-1",
"2:4.23.4+dfsg-1~bpo13+1",
"2:4.23.5+dfsg-1",
"2:4.23.5+dfsg-1~bpo13+1",
"2:4.23.6+dfsg-1",
"2:4.23.6+dfsg-2",
"2:4.23.6+dfsg-2~bpo13+1",
"2:4.24.0+dfsg-1",
"2:4.24.0~rc1+dfsg-1",
"2:4.24.0~rc1+dfsg-2",
"2:4.24.0~rc1+dfsg-3",
"2:4.24.0~rc2+dfsg-1",
"2:4.24.1+dfsg-1",
"2:4.24.2+dfsg-1",
"2:4.24.2+dfsg-1~bpo13+1",
"2:4.24.3+dfsg-1~bpo13+1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3012.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-27T09:47:43.424760557Z",
"provider": "osv",
"upstream": [
"CVE-2026-3012"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2026-3012"
]
},
"related_cves": [
{
"value": "CVE-2026-3012",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 461454,
"published_at": "2026-05-27T11:16:18.357+00:00"
}