Catalogo CVE

CVE-2026-1933

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem writ

[Catalogo CVE]

Gravità
High · CVSS 7.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.86% · Oct 22, 2026

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata through SMB operations even on read-only exports. This could allow modification of SMB-visible file behavior, including converting files into symbolic links or other reparse point types.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansambasid2:4.25.1+dfsg-1fixed
Debiansambaforky2:4.25.0+dfsg-1fixed
Debiansambatrixie2:4.22.11+dfsg-0+deb13u1fixed
Debiansambatrixie-security2:4.22.10+dfsg-0+deb13u2fixed
Debiansambabookworm2:4.17.12+dfsg-0+deb12u4not affected
Debiansambabookworm-security2:4.17.12+dfsg-0+deb12u4not affected
CpesambaNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
CpectdbNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpeldb-toolsNot reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6fixed
Cpelibldb-devNot reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6fixed
Cpelibldb2Not reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6fixed
Cpelibnss-winbindNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpelibpam-winbindNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpelibsmbclient-devNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpelibsmbclient0Not reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpelibwbclient-devNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpelibwbclient0Not reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpepython3-ldbNot reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6fixed
Cpepython3-ldb-devNot reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6fixed
Cpepython3-sambaNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cperegistry-toolsNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-ad-dcNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-ad-provisionNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-commonNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-common-binNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-devNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-dsdb-modulesNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-libsNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-testsuiteNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-vfs-modulesNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpesamba-vfs-modules-extraNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
CpesmbclientNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
CpewinbindNot reported2:4.19.5+dfsg-4ubuntu9.6fixed
Cpeopenshift_container_platformNot reportedNot reportedunknown
CpesambaNot reported4.2.2fixed
Cpeenterprise_linuxNot reportedNot reportedunknown
CpesambaNot reportedNot reportednot affected
Cpeopenshift_container_platformNot reportedNot reportedunknown
CpesambaNot reported4.2.2fixed
Cpeenterprise_linuxNot reportedNot reportedunknown
Alpinesamba3.234.22.10-r0fixed
Alpinesamba3.244.23.8-r0fixed
Susesambalinux enterprise server 16.04.22.9+git.506.22c03ce0781-160000.1.1fixed
Susesambalinux enterprise server for sap applications 16.04.22.9+git.506.22c03ce0781-160000.1.1fixed
Susesambalinux micro 6.24.22.9+git.506.22c03ce0781-160000.1.1fixed
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu2vulnerable
Ubuntusamba22.042:4.13.5+dfsg-2ubuntu3vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.13.14+dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu2vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu4vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5vulnerable
Ubuntusamba22.042:4.15.5~dfsg-0ubuntu5.1vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.2vulnerable
Ubuntusamba22.042:4.15.9+dfsg-0ubuntu0.3vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.1vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.2vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.3vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.4vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.5vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.6vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.7vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.8vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.9vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.10vulnerable
Ubuntusamba22.042:4.15.13+dfsg-0ubuntu1.12fixed
Ubuntusamba24.042:4.18.6+dfsg-1ubuntu2vulnerable
Ubuntusamba24.042:4.18.6+dfsg-1ubuntu2.1vulnerable
Ubuntusamba24.042:4.18.6+dfsg-1ubuntu2.2vulnerable
Ubuntusamba24.042:4.19.4+dfsg-3ubuntu1vulnerable
Ubuntusamba24.042:4.19.5+dfsg-1ubuntu1vulnerable
Ubuntusamba24.042:4.19.5+dfsg-4ubuntu7vulnerable
Ubuntusamba24.042:4.19.5+dfsg-4ubuntu8vulnerable
Ubuntusamba24.042:4.19.5+dfsg-4ubuntu9vulnerable
Ubuntusamba24.042:4.19.5+dfsg-4ubuntu9.2vulnerable
Ubuntusamba24.042:4.19.5+dfsg-4ubuntu9.3vulnerable
Ubuntusamba24.042:4.19.5+dfsg-4ubuntu9.4vulnerable
Ubuntusamba24.042:4.19.5+dfsg-4ubuntu9.6fixed
Ubuntusamba25.102:4.21.4+dfsg-1ubuntu3vulnerable
Ubuntusamba25.102:4.21.4+dfsg-1ubuntu4vulnerable
Ubuntusamba25.102:4.21.4+dfsg-1ubuntu5vulnerable
Ubuntusamba25.102:4.22.2+dfsg-1ubuntu1vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu1vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu2vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu2.1vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu2.2vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu2.4fixed
Ubuntusamba26.042:4.22.3+dfsg-4ubuntu2vulnerable
Ubuntusamba26.042:4.22.3+dfsg-4ubuntu2.1vulnerable
Ubuntusamba26.042:4.22.3+dfsg-4ubuntu3vulnerable
Ubuntusamba26.042:4.22.3+dfsg-4ubuntu4vulnerable
Ubuntusamba26.042:4.23.4+dfsg-1ubuntu1vulnerable
Ubuntusamba26.042:4.23.5+dfsg-1ubuntu2vulnerable
Ubuntusamba26.042:4.23.6+dfsg-1ubuntu1vulnerable
Ubuntusamba26.042:4.23.6+dfsg-1ubuntu2vulnerable
Ubuntusamba26.042:4.23.6+dfsg-1ubuntu2.1fixed
Opensusesambaleap 16.04.22.9+git.506.22c03ce0781-160000.1.1fixed
Ubuntusamba25.102:4.21.4+dfsg-1ubuntu3vulnerable
Ubuntusamba25.102:4.21.4+dfsg-1ubuntu4vulnerable
Ubuntusamba25.102:4.21.4+dfsg-1ubuntu5vulnerable
Ubuntusamba25.102:4.22.2+dfsg-1ubuntu1vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu1vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu2vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu2.1vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu2.2vulnerable
Ubuntusamba25.102:4.22.3+dfsg-4ubuntu2.4fixed
Ubuntusamba26.042:4.22.3+dfsg-4ubuntu2vulnerable
Ubuntusamba26.042:4.22.3+dfsg-4ubuntu2.1vulnerable
Ubuntusamba26.042:4.22.3+dfsg-4ubuntu3vulnerable
Ubuntusamba26.042:4.22.3+dfsg-4ubuntu4vulnerable
Ubuntusamba26.042:4.23.4+dfsg-1ubuntu1vulnerable
Ubuntusamba26.042:4.23.5+dfsg-1ubuntu2vulnerable
Ubuntusamba26.042:4.23.6+dfsg-1ubuntu1vulnerable
Ubuntusamba26.042:4.23.6+dfsg-1ubuntu2vulnerable
Ubuntusamba26.042:4.23.6+dfsg-1ubuntu2.1fixed
Opensusesambatumbleweed4.23.8+git.477.f78166bceed-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansambasourcesid2:4.24.3+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourceforky2:4.24.3+dfsg-1not yet assignedNot reportedNot reported
Debiansambasourcetrixie2:4.22.8+dfsg-0+deb13u2not yet assignedNot reportedNot reported
DebiansambasourcebookwormNot affectedunimportantNot reportedNot reported
CpesambacpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
CpectdbcpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpeldb-toolscpeNot reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpelibldb-devcpeNot reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpelibldb2cpeNot reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpelibnss-winbindcpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpelibpam-winbindcpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpelibsmbclient-devcpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpelibsmbclient0cpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpelibwbclient-devcpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpelibwbclient0cpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpepython3-ldbcpeNot reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpepython3-ldb-devcpeNot reported2:2.8.0+samba4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpepython3-sambacpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cperegistry-toolscpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-ad-dccpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-ad-provisioncpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-commoncpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-common-bincpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-devcpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-dsdb-modulescpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-libscpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-testsuitecpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-vfs-modulescpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
Cpesamba-vfs-modules-extracpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
CpesmbclientcpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
CpewinbindcpeNot reported2:4.19.5+dfsg-4ubuntu9.6Not reportedNot reportedNot reported
CpesambacpeNot reported4.2.2Not reportedNot reportedNot reported
CpesambacpeNot reported4.2.2Not reportedNVD-CVE-2026-1933Not reported
Alpinesambaapk3.234.22.10-r0Not reportedALPINE-CVE-2026-1933Not reported
Alpinesambaapk3.244.23.8-r0Not reportedALPINE-CVE-2026-1933Not reported
Susesambarpmlinux enterprise server 16.04.22.9+git.506.22c03ce0781-160000.1.1Not reportedSUSE-SU-2026:22080-1Not reported
Susesambarpmlinux enterprise server for sap applications 16.04.22.9+git.506.22c03ce0781-160000.1.1Not reportedSUSE-SU-2026:22080-1Not reported
Susesambarpmlinux micro 6.24.22.9+git.506.22c03ce0781-160000.1.1Not reportedSUSE-SU-2026:22045-1Not reported
Ubuntusambadeb22.042:4.15.13+dfsg-0ubuntu1.12Not reportedUSN-8306-1Not reported
Ubuntusambadeb24.042:4.19.5+dfsg-4ubuntu9.6Not reportedUSN-8306-1Not reported
Ubuntusambadeb25.102:4.22.3+dfsg-4ubuntu2.4Not reportedUSN-8306-1Not reported
Ubuntusambadeb26.042:4.23.6+dfsg-1ubuntu2.1Not reportedUSN-8306-1Not reported
Opensusesambarpmleap 16.04.22.9+git.506.22c03ce0781-160000.1.1Not reportedOPENSUSE-SU-2026:20905-1Not reported
Ubuntusambadeb25.102:4.22.3+dfsg-4ubuntu2.4Not reportedUBUNTU-CVE-2026-1933Not reported
Ubuntusambadeb26.042:4.23.6+dfsg-1ubuntu2.1Not reportedUBUNTU-CVE-2026-1933Not reported
Opensusesambarpmtumbleweed4.23.8+git.477.f78166bceed-1.1Not reportedOPENSUSE-SU-2026:10884-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [ctdb]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [ctdb-pcp-pmda]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [ldb-tools]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [libldb2]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [libldb2-32bit]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [libldb-devel]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [python3-ldb]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [python3-ldb-32bit]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-ad-dc]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-ad-dc-libs]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-ceph]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-client]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-client-32bit]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-client-lang]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · noarch · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-client-libs]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-dcerpc]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-devel]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

  • [samba-devel-32bit]Sconosciuto

    Pacchetto sorgente: [samba]

    Dettagli (1)
    • 4.24.5+git.481.dba78dbdea-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 4.23.8+git.477.f78166bceed-1.1

      Version impact unknown

      nvd · samba · opensuse · tumbleweed

Altri risultati

Osservato:

Riferimenti