The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Apr 3, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-winbindUpgrade libwbclient-debuginfoUpgrade samba-develUpgrade samba-client-libsUpgrade samba-dcerpc-debuginfoUpgrade samba-debuginfoUpgrade libnetapi-debuginfoUpgrade libwbclientUpgrade samba-dc-libs-debuginfoUpgrade samba-usersharesUpgrade samba-test-debuginfoUpgrade ldb-tools-debuginfoUpgrade samba-testUpgrade python3-samba-develUpgrade python3-samba-dc-debuginfoUpgrade python3-sambaUpgrade libldbUpgrade libldb-debuginfoUpgrade ldb-toolsUpgrade python3-samba-dcUpgrade samba-common-tools-debuginfoUpgrade libsmbclient-debuginfoUpgrade python3-ldb-develUpgrade samba-test-libs-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-modules-debuginfoUpgrade sambaUpgrade samba-debugsourceUpgrade python3-ldb-debuginfoUpgrade samba-krb5-printingUpgrade samba-vfs-iouringUpgrade samba-pidlUpgrade samba-toolsUpgrade samba-commonUpgrade samba-common-libs-debuginfoUpgrade libldb-debugsourceUpgrade libnetapi-develUpgrade libwbclient-develUpgrade samba-test-libsUpgrade samba-vfs-iouring-debuginfoUpgrade samba-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-libsUpgrade samba-client-libs-debuginfoUpgrade samba-dc-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-clientUpgrade python-ldb-devel-commonUpgrade libnetapiUpgrade samba-client-debuginfoUpgrade libsmbclientUpgrade samba-libs-debuginfoUpgrade samba-dcerpcUpgrade libldb-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade libsmbclient-develUpgrade python3-samba-debuginfoUpgrade samba-common-toolsUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-modulesUpgrade python3-ldbUpgrade samba-winbind-clientsUpgrade python3-samba-test | Feb 17, 2025 | Mar 29, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 3, 2023 |
| Freebsd | — | Upgrade samba417Upgrade samba416Upgrade samba418 | Apr 14, 2023 | Apr 7, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Apr 3, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libldb | Jan 10, 2024 | Apr 3, 2023 |
| Samba | — | Upgrade to Samba 4.17.7 or later.Upgrade to Samba 4.16.10 or later.Upgrade to Samba 4.18.1 or later. | Apr 27, 2023 | Apr 3, 2023 |
| Suse | — | Upgrade libldb2Upgrade samba-ad-dc-libsUpgrade libsamba-policy-develUpgrade samba-winbindUpgrade samba-ad-dc-libs-32bitUpgrade samba-libs-python3-32bitUpgrade ctdb-pcp-pmdaUpgrade python3-ldbUpgrade samba-docUpgrade samba-toolUpgrade samba-client-32bitUpgrade libldb-develUpgrade samba-winbind-libs-32bitUpgrade samba-ad-dcUpgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade python3-ldb-develUpgrade sambaUpgrade samba-libs-python3Upgrade samba-devel-32bitUpgrade samba-testUpgrade samba-develUpgrade samba-libsUpgrade samba-dsdb-modulesUpgrade ctdbUpgrade samba-client-libsUpgrade samba-ldb-ldapUpgrade python3-ldb-32bitUpgrade samba-winbind-libsUpgrade libsamba-policy0-python3-32bitUpgrade samba-cephUpgrade libsamba-policy0-python3Upgrade samba-client-libs-32bitUpgrade samba-python3Upgrade libldb2-32bitUpgrade ldb-toolsUpgrade samba-libs-32bitUpgrade samba-gpupdate | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade libldb2Upgrade samba | Apr 10, 2023 | Apr 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub