The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Apr 3, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-common-libsUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade samba-winbind-debuginfoUpgrade samba-krb5-printing-debuginfoUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-modulesUpgrade python3-ldbUpgrade libldb-develUpgrade libnetapiUpgrade samba-dc-libsUpgrade python3-samba-debuginfoUpgrade samba-client-libs-debuginfoUpgrade libsmbclient-develUpgrade samba-clientUpgrade samba-vfs-iouring-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libsmbclientUpgrade samba-libsUpgrade python-ldb-devel-commonUpgrade samba-client-debuginfoUpgrade samba-dcerpcUpgrade samba-libs-debuginfoUpgrade samba-test-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-common-toolsUpgrade samba-dc-libs-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade ldb-tools-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade sambaUpgrade samba-toolsUpgrade python3-ldb-develUpgrade libldbUpgrade ldb-toolsUpgrade libsmbclient-debuginfoUpgrade samba-test-libs-debuginfoUpgrade python3-samba-dcUpgrade libldb-debuginfoUpgrade python3-samba-develUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-debuginfoUpgrade libnetapi-develUpgrade samba-common-libs-debuginfoUpgrade samba-commonUpgrade libldb-debugsourceUpgrade samba-pidlUpgrade libwbclient-develUpgrade samba-debuginfoUpgrade samba-debugsourceUpgrade samba-dcerpc-debuginfoUpgrade python3-sambaUpgrade libwbclientUpgrade libnetapi-debuginfoUpgrade samba-client-libsUpgrade samba-develUpgrade libwbclient-debuginfoUpgrade samba-winbindUpgrade samba-usersharesUpgrade python3-ldb-debuginfoUpgrade samba-vfs-iouringUpgrade samba-krb5-printingUpgrade samba-common-tools-debuginfoUpgrade samba-test | Feb 17, 2025 | Mar 29, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 3, 2023 |
| Freebsd | — | Upgrade samba417Upgrade samba418Upgrade samba416 | Apr 14, 2023 | Apr 7, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Apr 3, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libldb | Jan 10, 2024 | Apr 3, 2023 |
| Samba | — | Upgrade to Samba 4.17.7 or later.Upgrade to Samba 4.18.1 or later.Upgrade to Samba 4.16.10 or later. | Apr 27, 2023 | Apr 3, 2023 |
| Suse | — | Upgrade samba-winbindUpgrade sambaUpgrade python3-ldbUpgrade samba-client-32bitUpgrade libldb-develUpgrade samba-libs-python3-32bitUpgrade samba-clientUpgrade libsamba-policy-python3-develUpgrade libldb2Upgrade ctdb-pcp-pmdaUpgrade python3-ldb-develUpgrade samba-ad-dc-libs-32bitUpgrade samba-toolUpgrade samba-ad-dcUpgrade samba-winbind-libs-32bitUpgrade samba-ad-dc-libsUpgrade samba-docUpgrade libsamba-policy-develUpgrade samba-libsUpgrade samba-testUpgrade samba-libs-python3Upgrade samba-cephUpgrade samba-client-libs-32bitUpgrade samba-winbind-libsUpgrade samba-ldb-ldapUpgrade samba-dsdb-modulesUpgrade ctdbUpgrade samba-client-libsUpgrade python3-ldb-32bitUpgrade ldb-toolsUpgrade samba-gpupdateUpgrade libldb2-32bitUpgrade libsamba-policy0-python3-32bitUpgrade samba-libs-32bitUpgrade libsamba-policy0-python3Upgrade samba-python3Upgrade samba-develUpgrade samba-devel-32bit | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade sambaUpgrade libldb2 | Apr 10, 2023 | Apr 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub