The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba48Upgrade samba47Upgrade samba46 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sambaUpgrade samba-pythonUpgrade samba-commonUpgrade samba-common-libsUpgrade samba-libsUpgrade samba-winbindUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-winbind-modulesUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libwbclient | Dec 4, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.7.9Upgrade to Samba version 4.8.4Upgrade to Samba version 4.6.16 | Aug 16, 2018 | Aug 16, 2018 |
| Suse | — | Upgrade libsamba-credentials0Upgrade libsamba-passdb-develUpgrade libsamba-util0-32bitUpgrade libsamba-util-develUpgrade libtevent-util-develUpgrade libndr-krb5pac0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-client-32bitUpgrade samba-kdcUpgrade libsmbclient-develUpgrade libsamba-policy0-32bitUpgrade libsmbconf0-32bitUpgrade samba-testUpgrade samba-dsdb-modulesUpgrade samba-libsUpgrade libsamdb0-32bitUpgrade libdcerpc0Upgrade libsamba-hostconfig-develUpgrade libsamdb-develUpgrade libndr-standard-develUpgrade libndr-standard0-32bitUpgrade libsamba-errors0-32bitUpgrade libsamba-policy0Upgrade libsamba-passdb0Upgrade libsmbldap-develUpgrade libsamba-policy0-python3Upgrade samba-cephUpgrade libndr-standard0Upgrade samba-pidlUpgrade libndr0Upgrade libwbclient0Upgrade libsmbconf0Upgrade libsamba-hostconfig0Upgrade libsmbldap0-32bitUpgrade samba-libs-32bitUpgrade libdcerpc-samr0Upgrade libsmbclient0-32bitUpgrade samba-core-develUpgrade libndr-nbt-develUpgrade libndr1Upgrade libsmbldap2Upgrade samba-pythonUpgrade libsmbconf-develUpgrade ctdb-testsUpgrade samba-clientUpgrade libsamdb0Upgrade libndr1-32bitUpgrade libndr-nbt0Upgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade libnetapi0-32bitUpgrade libsamba-policy-develUpgrade ctdb-pcp-pmdaUpgrade libsamba-policy-python3-develUpgrade libnetapi-develUpgrade libndr-krb5pac-develUpgrade samba-python3Upgrade libdcerpc-samr-develUpgrade libsamba-errors-develUpgrade libsmbclient0Upgrade libsamba-passdb0-32bitUpgrade libndr-krb5pac0Upgrade libdcerpc0-32bitUpgrade libsamba-errors0Upgrade ctdbUpgrade libwbclient-develUpgrade libdcerpc-binding0Upgrade libsamba-hostconfig0-32bitUpgrade libsmbldap0Upgrade libtevent-util0-32bitUpgrade libsamba-credentials-develUpgrade samba-winbind-32bitUpgrade libdcerpc-develUpgrade samba-libs-python3-32bitUpgrade samba-libs-python3Upgrade libndr-nbt0-32bitUpgrade libndr-develUpgrade libnetapi0Upgrade samba-winbindUpgrade samba-kdc-32bitUpgrade libdcerpc-samr0-32bitUpgrade libwbclient0-32bitUpgrade samba-docUpgrade libsamba-util0Upgrade libtevent-util0Upgrade sambaUpgrade libndr0-32bit | Aug 18, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Aug 17, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub