An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Jan 17, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-common-toolsUpgrade samba-krb5-printing-debuginfoUpgrade samba-dcerpcUpgrade samba-dcerpc-debuginfoUpgrade samba-testUpgrade samba-common-tools-debuginfoUpgrade samba-clientUpgrade samba-winbind-debuginfoUpgrade python3-samba-develUpgrade python3-samba-testUpgrade samba-usersharesUpgrade samba-client-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-winbind-clientsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade python3-sambaUpgrade libnetapi-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade libwbclientUpgrade libwbclient-develUpgrade libnetapiUpgrade samba-winbind-clients-debuginfoUpgrade samba-client-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade python3-samba-debuginfoUpgrade samba-common-libsUpgrade samba-client-libs-debuginfoUpgrade samba-libsUpgrade python3-samba-dc-debuginfoUpgrade samba-toolsUpgrade samba-dc-libsUpgrade samba-debugsourceUpgrade samba-pidlUpgrade libsmbclient-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-commonUpgrade samba-vfs-iouringUpgrade samba-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-develUpgrade samba-winbind-modulesUpgrade samba-test-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-dcUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-libsUpgrade libsmbclient-develUpgrade sambaUpgrade samba-krb5-printingUpgrade libnetapi-develUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-libs-debuginfo | Feb 17, 2025 | Apr 13, 2022 |
| Debian | — | Upgrade samba | May 15, 2025 | Jan 17, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Feb 21, 2024 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade libwbclientUpgrade samba-commonUpgrade samba-libsUpgrade samba-winbind-clientsUpgrade samba-winbindUpgrade samba-winbind-modulesUpgrade sambaUpgrade libsmbclient | Apr 9, 2024 | Jan 17, 2023 |
| Ubuntu | — | Upgrade samba | Nov 19, 2024 | Jan 17, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub