Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-14628

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

Published

2023-01-17T18:15:10.810

Last Modified

2025-01-22T16:10:38.410

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses

Type: Primary
CWE-862

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	samba	samba	< 4.18.9	Yes
Application	samba	samba	< 4.19.3	Yes
Operating System	fedoraproject	fedora	37	Yes

References

http://www.openwall.com/lists/oss-security/2023/11/28/4 Mailing List ([email protected])
https://bugzilla.redhat.com/show_bug.cgi?id=1625445 Exploit, Issue Tracking, Patch, Third Party Advisory ([email protected])
https://bugzilla.samba.org/show_bug.cgi?id=13595 Exploit, Issue Tracking, Patch, Vendor Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/ Patch, Third Party Advisory ([email protected])
https://lists.fedoraproject.org/archives/list/[email protected]/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/ Patch, Third Party Advisory ([email protected])
http://www.openwall.com/lists/oss-security/2023/11/28/4 Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.redhat.com/show_bug.cgi?id=1625445 Exploit, Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://bugzilla.samba.org/show_bug.cgi?id=13595 Exploit, Issue Tracking, Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/ Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.fedoraproject.org/archives/list/[email protected]/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/ Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://security.netapp.com/advisory/ntap-20230223-0008/ Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)