The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Apr 3, 2023 |
| Amazon_linux_2023 | — | Upgrade libsmbclientUpgrade samba-dc-libsUpgrade samba-common-libsUpgrade samba-client-debuginfoUpgrade python-ldb-devel-commonUpgrade samba-libsUpgrade samba-winbind-krb5-locatorUpgrade samba-client-libs-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade python3-ldbUpgrade samba-clientUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-winbind-clientsUpgrade samba-common-toolsUpgrade samba-test-libsUpgrade samba-krb5-printing-debuginfoUpgrade python3-samba-testUpgrade samba-winbind-modulesUpgrade python3-samba-debuginfoUpgrade libnetapiUpgrade samba-dcerpcUpgrade samba-libs-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade libldb-develUpgrade libsmbclient-develUpgrade python3-ldb-debuginfoUpgrade samba-testUpgrade samba-ldb-ldap-modulesUpgrade python3-samba-dc-debuginfoUpgrade ldb-tools-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade python3-sambaUpgrade samba-debugsourceUpgrade libnetapi-debuginfoUpgrade samba-debuginfoUpgrade libwbclientUpgrade samba-dcerpc-debuginfoUpgrade samba-client-libsUpgrade samba-vfs-iouringUpgrade sambaUpgrade samba-common-tools-debuginfoUpgrade samba-winbindUpgrade libwbclient-debuginfoUpgrade samba-develUpgrade libwbclient-develUpgrade libnetapi-develUpgrade libldb-debugsourceUpgrade samba-commonUpgrade libldbUpgrade ldb-toolsUpgrade libsmbclient-debuginfoUpgrade python3-ldb-develUpgrade samba-pidlUpgrade samba-dc-libs-debuginfoUpgrade samba-test-debuginfoUpgrade python3-samba-develUpgrade samba-usersharesUpgrade samba-common-libs-debuginfoUpgrade samba-krb5-printingUpgrade samba-test-libs-debuginfoUpgrade python3-samba-dcUpgrade libldb-debuginfoUpgrade samba-tools | Feb 17, 2025 | Mar 29, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 3, 2023 |
| Freebsd | — | Upgrade samba418Upgrade samba416Upgrade samba417 | Apr 14, 2023 | Apr 7, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Apr 3, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libldb | Jan 10, 2024 | Apr 3, 2023 |
| Samba | — | Upgrade to Samba 4.17.7 or later.Upgrade to Samba 4.18.1 or later.Upgrade to Samba 4.16.10 or later. | Apr 27, 2023 | Apr 3, 2023 |
| Suse | — | Upgrade libsamba-policy0-python3-32bitUpgrade samba-cephUpgrade samba-devel-32bitUpgrade samba-testUpgrade samba-libs-python3Upgrade libsamba-policy0-python3Upgrade samba-client-libsUpgrade python3-ldb-32bitUpgrade samba-ldb-ldapUpgrade ctdbUpgrade samba-dsdb-modulesUpgrade libldb2-32bitUpgrade samba-libsUpgrade samba-gpupdateUpgrade samba-libs-32bitUpgrade ldb-toolsUpgrade samba-winbind-libsUpgrade samba-python3Upgrade samba-develUpgrade samba-client-libs-32bitUpgrade samba-clientUpgrade samba-ad-dc-libs-32bitUpgrade samba-ad-dcUpgrade samba-winbind-libs-32bitUpgrade samba-docUpgrade ctdb-pcp-pmdaUpgrade libldb-develUpgrade libsamba-policy-python3-develUpgrade samba-winbindUpgrade python3-ldb-develUpgrade samba-libs-python3-32bitUpgrade samba-toolUpgrade libsamba-policy-develUpgrade samba-ad-dc-libsUpgrade python3-ldbUpgrade samba-client-32bitUpgrade sambaUpgrade libldb2 | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade libldb2Upgrade samba | Apr 10, 2023 | Apr 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2023 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub