winbind in version 3.6 and later implements a request to translate multiple Windows SIDs into names in one request. This was done for performance reasons: The Microsoft RPC call domain controllers offer to do this translation offer this batch operation, so it was an obvious extension to also offer this batch operation on the winbind unix domain stream socket that is available to local processes on the Samba server. CREATE(Triage):(User=admin) [CVE-2020-14323|https://nvd.nist.gov/vuln/detail/CVE-2020-14323]