The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba47Upgrade samba48 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade sambaUpgrade samba-winbindUpgrade samba-libsUpgrade samba-pythonUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade libwbclientUpgrade libsmbclientUpgrade samba-common-tools | Dec 4, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.7.9Upgrade to Samba version 4.6.16Upgrade to Samba version 4.8.4 | Aug 16, 2018 | Aug 16, 2018 |
| Suse | — | Upgrade samba-client-32bitUpgrade samba-libsUpgrade libsamdb0-32bitUpgrade libsamba-credentials0Upgrade libndr-standard-develUpgrade libtevent-util-develUpgrade libsmbconf0Upgrade samba-kdcUpgrade samba-libs-32bitUpgrade libsamba-hostconfig0Upgrade libsamba-util-develUpgrade libndr-krb5pac0-32bitUpgrade libsmbldap-develUpgrade libsamba-passdb0Upgrade libdcerpc-binding0-32bitUpgrade libdcerpc-samr0Upgrade libsmbldap0-32bitUpgrade libsamdb-develUpgrade libsamba-util0-32bitUpgrade libsamba-passdb-develUpgrade libsamba-hostconfig-develUpgrade libsamba-policy0Upgrade libwbclient0Upgrade libsamba-policy0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-policy0-python3Upgrade libsmbclient-develUpgrade samba-cephUpgrade libsamba-errors0-32bitUpgrade libndr-standard0Upgrade libdcerpc0Upgrade libsmbconf0-32bitUpgrade samba-testUpgrade libndr-standard0-32bitUpgrade libndr0Upgrade samba-pidlUpgrade libsamba-hostconfig0-32bitUpgrade libwbclient0-32bitUpgrade ctdbUpgrade libdcerpc-binding0Upgrade libsamba-passdb0-32bitUpgrade libsmbconf-develUpgrade libsmbldap2-32bitUpgrade libsamba-credentials-develUpgrade libndr1-32bitUpgrade ctdb-testsUpgrade libsmbldap2Upgrade libdcerpc-samr0-32bitUpgrade samba-clientUpgrade libtevent-util0Upgrade libsamba-util0Upgrade libwbclient-develUpgrade libsmbclient0-32bitUpgrade libnetapi0-32bitUpgrade samba-pythonUpgrade libsamba-policy-develUpgrade libndr1Upgrade libsamba-credentials0-32bitUpgrade samba-kdc-32bitUpgrade libnetapi-develUpgrade libdcerpc-samr-develUpgrade libndr-krb5pac-develUpgrade libsmbldap0Upgrade libndr0-32bitUpgrade libsamba-errors-develUpgrade ctdb-pcp-pmdaUpgrade libndr-nbt0-32bitUpgrade libndr-develUpgrade samba-python3Upgrade libsamdb0Upgrade libndr-krb5pac0Upgrade libsamba-errors0Upgrade samba-winbindUpgrade libsamba-policy-python3-develUpgrade libnetapi0Upgrade libtevent-util0-32bitUpgrade sambaUpgrade samba-docUpgrade samba-core-develUpgrade samba-winbind-32bitUpgrade libndr-nbt-develUpgrade libdcerpc0-32bitUpgrade samba-libs-python3-32bitUpgrade libsmbclient0Upgrade libdcerpc-develUpgrade samba-libs-python3Upgrade libndr-nbt0 | Aug 18, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Aug 17, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub