The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 24, 2018 | Aug 22, 2018 |
| Debian | — | Upgrade samba | Aug 15, 2018 | Aug 14, 2018 |
| Freebsd | — | Upgrade samba47Upgrade samba48Upgrade samba46 | Aug 15, 2018 | Aug 14, 2018 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Mar 27, 2020 | Aug 22, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade libwbclientUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade samba-client-libsUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade libsmbclientUpgrade samba-libsUpgrade samba-common-libsUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-commonUpgrade samba | Dec 4, 2019 | Aug 22, 2018 |
| Oracle Solaris | — | Upgrade service/network/samba to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4Upgrade library/samba/libsmbclient to version 4.8.4-11.4.1.0.1.2.0 on Solaris 11.4 | Oct 19, 2018 | Aug 22, 2018 |
| Samba | — | Upgrade to Samba version 4.7.9Upgrade to Samba version 4.8.4Upgrade to Samba version 4.6.16 | Aug 16, 2018 | Aug 16, 2018 |
| Suse | — | Upgrade libndr-nbt0-32bitUpgrade libndr1Upgrade libdcerpc-develUpgrade samba-python3Upgrade ctdbUpgrade libsamba-passdb0-32bitUpgrade libsamba-policy-develUpgrade libsamba-credentials0-32bitUpgrade samba-pythonUpgrade samba-kdc-32bitUpgrade libndr-nbt-develUpgrade ctdb-pcp-pmdaUpgrade libsmbconf-develUpgrade libndr1-32bitUpgrade libsamba-errors-develUpgrade libsmbclient0-32bitUpgrade samba-libs-python3Upgrade libsmbclient0Upgrade ctdb-testsUpgrade libsmbldap0Upgrade libnetapi-develUpgrade libndr-krb5pac-develUpgrade libtevent-util0-32bitUpgrade samba-libs-python3-32bitUpgrade libnetapi0Upgrade libsamdb0Upgrade samba-clientUpgrade samba-core-develUpgrade libdcerpc-samr-develUpgrade samba-winbindUpgrade libsmbldap2Upgrade samba-winbind-32bitUpgrade libsamba-util0Upgrade libndr-develUpgrade libwbclient0-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc-binding0Upgrade libdcerpc-samr0-32bitUpgrade libsmbldap2-32bitUpgrade libnetapi0-32bitUpgrade samba-docUpgrade sambaUpgrade libsamba-hostconfig0-32bitUpgrade libndr-krb5pac0Upgrade libndr0-32bitUpgrade libsamba-errors0Upgrade libwbclient-develUpgrade libsamba-policy-python3-develUpgrade libdcerpc0-32bitUpgrade libndr-nbt0Upgrade libtevent-util0Upgrade libsamba-hostconfig0Upgrade libsamba-util0-32bitUpgrade samba-dsdb-modulesUpgrade libsmbldap-develUpgrade libsmbldap0-32bitUpgrade libsamba-passdb0Upgrade libsmbconf0Upgrade samba-libs-32bitUpgrade samba-libsUpgrade libsmbclient-develUpgrade libsamba-policy0-python3Upgrade samba-client-32bitUpgrade libsamba-hostconfig-develUpgrade libndr0Upgrade libndr-krb5pac0-32bitUpgrade samba-kdcUpgrade libsamba-util-develUpgrade samba-pidlUpgrade libsamdb0-32bitUpgrade libdcerpc-binding0-32bitUpgrade samba-cephUpgrade libtevent-util-develUpgrade libndr-standard0Upgrade libdcerpc0Upgrade libsmbconf0-32bitUpgrade samba-testUpgrade libsamba-passdb-develUpgrade libsamba-policy0-32bitUpgrade libdcerpc-samr0Upgrade libsamdb-develUpgrade libsamba-errors0-32bitUpgrade libsamba-credentials0Upgrade libsamba-policy0Upgrade libndr-standard0-32bitUpgrade libwbclient0Upgrade libndr-standard-devel | Aug 18, 2018 | Aug 14, 2018 |
| Ubuntu | — | Upgrade sambaUpgrade libsmbclient | Aug 17, 2018 | Aug 14, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub