The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Apr 3, 2023 |
| Amazon_linux_2023 | — | Upgrade ldb-tools-debuginfoUpgrade samba-testUpgrade python3-samba-dc-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-usersharesUpgrade samba-winbind-modules-debuginfoUpgrade samba-winbindUpgrade libwbclient-debuginfoUpgrade samba-develUpgrade samba-dcerpc-debuginfoUpgrade samba-client-libsUpgrade samba-debugsourceUpgrade libnetapi-debuginfoUpgrade libwbclientUpgrade python3-sambaUpgrade python3-ldb-debuginfoUpgrade python3-samba-develUpgrade samba-common-tools-debuginfoUpgrade samba-debuginfoUpgrade samba-toolsUpgrade samba-test-debuginfoUpgrade samba-test-libs-debuginfoUpgrade libldb-debuginfoUpgrade samba-krb5-printingUpgrade sambaUpgrade python3-ldb-develUpgrade samba-vfs-iouringUpgrade libnetapi-develUpgrade python3-samba-dcUpgrade libldbUpgrade libsmbclient-debuginfoUpgrade samba-pidlUpgrade libldb-debugsourceUpgrade samba-dc-libs-debuginfoUpgrade ldb-toolsUpgrade libwbclient-develUpgrade samba-commonUpgrade samba-common-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-winbind-clients-debuginfoUpgrade python3-ldbUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-krb5-printing-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-clientUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade libnetapiUpgrade python-ldb-devel-commonUpgrade samba-vfs-iouring-debuginfoUpgrade libsmbclientUpgrade samba-client-debuginfoUpgrade libldb-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-dcerpcUpgrade python3-samba-debuginfoUpgrade samba-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-libsUpgrade samba-test-libs | Feb 17, 2025 | Mar 29, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 3, 2023 |
| Freebsd | — | Upgrade samba417Upgrade samba418Upgrade samba416 | Apr 14, 2023 | Apr 7, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Apr 3, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libldb | Jan 10, 2024 | Apr 3, 2023 |
| Samba | — | Upgrade to Samba 4.16.10 or later.Upgrade to Samba 4.17.7 or later.Upgrade to Samba 4.18.1 or later. | Apr 27, 2023 | Apr 3, 2023 |
| Suse | — | Upgrade ldb-toolsUpgrade samba-libs-python3Upgrade samba-python3Upgrade samba-client-libs-32bitUpgrade samba-libsUpgrade samba-gpupdateUpgrade libldb2-32bitUpgrade samba-testUpgrade ctdbUpgrade samba-client-libsUpgrade python3-ldb-32bitUpgrade samba-ldb-ldapUpgrade samba-develUpgrade samba-dsdb-modulesUpgrade samba-winbind-libsUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy0-python3Upgrade samba-cephUpgrade samba-devel-32bitUpgrade samba-libs-32bitUpgrade sambaUpgrade samba-client-32bitUpgrade samba-clientUpgrade samba-ad-dcUpgrade libsamba-policy-develUpgrade samba-docUpgrade samba-libs-python3-32bitUpgrade samba-ad-dc-libs-32bitUpgrade libsamba-policy-python3-develUpgrade samba-winbind-libs-32bitUpgrade ctdb-pcp-pmdaUpgrade samba-winbindUpgrade libldb-develUpgrade python3-ldb-develUpgrade samba-toolUpgrade samba-ad-dc-libsUpgrade python3-ldbUpgrade libldb2 | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade sambaUpgrade libldb2 | Apr 10, 2023 | Apr 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub