The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba46Upgrade samba48Upgrade samba47 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade samba-commonUpgrade sambaUpgrade samba-winbindUpgrade samba-common-libsUpgrade samba-pythonUpgrade samba-libsUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-client-libsUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-winbind-modulesUpgrade samba-client | Dec 4, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.7.9Upgrade to Samba version 4.8.4Upgrade to Samba version 4.6.16 | Aug 16, 2018 | Aug 16, 2018 |
| Suse | — | Upgrade libnetapi0Upgrade samba-pythonUpgrade libsamdb0Upgrade samba-docUpgrade libdcerpc-samr0-32bitUpgrade libwbclient0-32bitUpgrade libsamba-util0Upgrade libndr-krb5pac0Upgrade libwbclient-develUpgrade libndr0-32bitUpgrade sambaUpgrade libdcerpc-develUpgrade libsmbclient0Upgrade samba-libs-python3Upgrade libtevent-util0Upgrade ctdbUpgrade libdcerpc0-32bitUpgrade libsamba-errors0Upgrade libndr1Upgrade samba-winbind-32bitUpgrade libdcerpc-binding0Upgrade samba-libs-python3-32bitUpgrade samba-kdc-32bitUpgrade libnetapi0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-credentials0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsmbldap0Upgrade libndr-nbt-develUpgrade libndr-nbt0Upgrade libsamba-policy-python3-develUpgrade libsamba-credentials-develUpgrade libtevent-util0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libdcerpc-samr-develUpgrade libsmbconf-develUpgrade libsmbclient0-32bitUpgrade samba-clientUpgrade samba-core-develUpgrade libsmbldap2Upgrade libsamba-errors-develUpgrade libnetapi-develUpgrade libndr-krb5pac-develUpgrade ctdb-pcp-pmdaUpgrade ctdb-testsUpgrade libndr1-32bitUpgrade samba-python3Upgrade libndr-develUpgrade libsamba-policy-develUpgrade samba-winbindUpgrade libndr-nbt0-32bitUpgrade libndr-standard-develUpgrade libtevent-util-develUpgrade libwbclient0Upgrade samba-client-32bitUpgrade libsamba-credentials0Upgrade libdcerpc-binding0-32bitUpgrade libndr-standard0-32bitUpgrade libsamdb-develUpgrade libndr0Upgrade samba-pidlUpgrade libsamdb0-32bitUpgrade libsamba-policy0-python3Upgrade samba-libsUpgrade libsamba-policy0-32bitUpgrade samba-testUpgrade samba-cephUpgrade libsmbconf0-32bitUpgrade libdcerpc0Upgrade libndr-krb5pac0-32bitUpgrade libsmbclient-develUpgrade libndr-standard0Upgrade libsamba-util0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-hostconfig-develUpgrade samba-kdcUpgrade libsamba-util-develUpgrade libsamba-passdb-develUpgrade libsamba-policy0Upgrade libsamba-errors0-32bitUpgrade samba-libs-32bitUpgrade libsmbldap-develUpgrade libsamba-hostconfig0Upgrade libsamba-passdb0Upgrade libsmbldap0-32bitUpgrade libsmbconf0Upgrade libdcerpc-samr0 | Aug 18, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade libsmbclientUpgrade samba | Aug 17, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub