What is the CVSS score of EUVD-2026-35033?

EUVD-2026-35033 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

Which versions of Samba are affected by EUVD-2026-35033?

Samba file-sharing services on Alpine Linux are vulnerable to remote denial-of-service attacks that can cause service outages via network-level access without requiring authentication.

How to fix or mitigate EUVD-2026-35033?

Within 24 hours: Inventory all Alpine Linux systems running Samba and assess production criticality and network exposure. Within 7 days: Deploy Samba version 4.23.8-r0 or later via Alpine Linux package updates to all affected systems, prioritizing production servers. Within 30 days: Validate patch application, monitor smbd service stability, and close vulnerability tracking records.

Samba EUVD-2026-35033

| CVE-2026-3238 HIGH

NULL Pointer Dereference (CWE-476)

N/A vendor:alpine

GHSA-gpff-px68-36rh

Denial Of Service Null Pointer Dereference

7.5

CVSS 3.1 · Vendor: vendor:alpine

Severity by source

Vendor (vendor:alpine) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from Vendor (vendor:alpine) · only source for this CVE.

CVSS VectorVendor: vendor:alpine

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Updated

Jun 08, 2026 - 09:28 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 08, 2026 - 09:28 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 08, 2026 - 09:22 vuln.today

cvss_changed

CVSS changed

Jun 08, 2026 - 09:22 NVD

7.5 (HIGH)

Analysis Generated

May 28, 2026 - 05:04 vuln.today

DescriptionCVE.org

Alpine Linux: samba fixed in 4.23.8-r0

AnalysisAI

Denial of service in Samba on Alpine Linux causes the smbd service to crash via a NULL pointer dereference triggered by remote unauthenticated network requests. Alpine Linux has issued a fix in samba 4.23.8-r0, and no public exploit identified at time of analysis. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Identify exposed Samba SMB service

Delivery

Send crafted SMB request to port 445

Exploit

Trigger NULL pointer dereference in smbd

Execution

Crash daemon process

Impact

Repeat to sustain denial of service

Access

Identify exposed Samba SMB service

Delivery

Send crafted SMB request to port 445

Exploit

Trigger NULL pointer dereference in smbd

Execution

Crash daemon process

Impact

Repeat to sustain denial of service

Vulnerability AssessmentAI

Exploitation	Exploitation requires network reachability to a Samba smbd service listening on SMB ports (typically TCP 445, optionally 139) running an Alpine Linux samba package prior to 4.23.8-r0. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H indicates a high-severity, network-reachable, low-complexity DoS requiring no authentication or user interaction - making the attack trivially repeatable against any exposed smbd instance. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An unauthenticated attacker with network reachability to TCP 445 sends a crafted SMB protocol message that triggers the NULL pointer dereference in smbd, causing the daemon to segfault and terminate. Repeating the request prevents legitimate clients from accessing shared files and authentication services until the service is restarted or auto-respawned; no public exploit identified at time of analysis, but the low attack complexity makes weaponization straightforward once the vulnerable code path is identified from the patch diff.
Remediation	The primary remediation on Alpine Linux is to upgrade the samba package to vendor-released patch 4.23.8-r0 or later via apk upgrade samba, which resolves the NULL pointer dereference. … Detailed patch versions, workarounds, and compensating controls in full report.