Unrated

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attac...

CVE-2018-14628 First seen on SecPulse Jan 18, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2018-14628 samba Fixed in: 4.18.9-r0
Debian DEBIAN-CVE-2018-14628 samba Fixed in: 2:4.17.12+dfsg-0+deb12u3
Ubuntu UBUNTU-CVE-2018-14628 samba

Original description The description as published by the source.

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory security.netapp.com
patch bugzilla.redhat.com
patch bugzilla.samba.org
patch lists.fedoraproject.org
patch lists.fedoraproject.org
web openwall.com

Key facts

Severity: Unrated
Published: Jan 18, 2023
First seen on SecPulse: Jan 18, 2023

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50