An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Jan 17, 2023 |
| Amazon_linux_2023 | — | Upgrade libsmbclient-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-vfs-iouringUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-debugsourceUpgrade python3-samba-dc-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-commonUpgrade samba-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-pidlUpgrade python3-samba-dcUpgrade samba-develUpgrade samba-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade samba-test-libsUpgrade samba-dc-libsUpgrade sambaUpgrade samba-winbindUpgrade libnetapi-develUpgrade samba-krb5-printingUpgrade libwbclient-debuginfoUpgrade samba-test-debuginfoUpgrade samba-toolsUpgrade libsmbclient-develUpgrade python3-samba-testUpgrade python3-samba-develUpgrade python3-sambaUpgrade samba-winbind-debuginfoUpgrade samba-winbind-clientsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-common-libsUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-common-libs-debuginfoUpgrade samba-client-libsUpgrade samba-dcerpc-debuginfoUpgrade samba-common-tools-debuginfoUpgrade python3-samba-debuginfoUpgrade samba-dcerpcUpgrade samba-winbind-clients-debuginfoUpgrade libnetapiUpgrade samba-testUpgrade samba-common-toolsUpgrade samba-usersharesUpgrade samba-clientUpgrade libnetapi-debuginfoUpgrade samba-client-debuginfoUpgrade libwbclient-develUpgrade libwbclientUpgrade samba-winbind-krb5-locatorUpgrade samba-krb5-printing-debuginfo | Feb 17, 2025 | Apr 13, 2022 |
| Debian | — | Upgrade samba | May 15, 2025 | Jan 17, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Feb 21, 2024 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade libwbclientUpgrade samba-winbindUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-libsUpgrade libsmbclientUpgrade sambaUpgrade samba-common | Apr 9, 2024 | Jan 17, 2023 |
| Ubuntu | — | Upgrade samba | Nov 19, 2024 | Jan 17, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 17, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub