The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-samba | Mar 21, 2024 | Apr 3, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-ldb-toolsamazon-linux-2023-upgrade-ldb-tools-debuginfoamazon-linux-2023-upgrade-libldbamazon-linux-2023-upgrade-libldb-debuginfoamazon-linux-2023-upgrade-libldb-debugsourceamazon-linux-2023-upgrade-libldb-develamazon-linux-2023-upgrade-libnetapiamazon-linux-2023-upgrade-libnetapi-debuginfoamazon-linux-2023-upgrade-libnetapi-develamazon-linux-2023-upgrade-libsmbclientamazon-linux-2023-upgrade-libsmbclient-debuginfoamazon-linux-2023-upgrade-libsmbclient-develamazon-linux-2023-upgrade-libwbclientamazon-linux-2023-upgrade-libwbclient-debuginfoamazon-linux-2023-upgrade-libwbclient-develamazon-linux-2023-upgrade-python3-ldbamazon-linux-2023-upgrade-python3-ldb-debuginfoamazon-linux-2023-upgrade-python3-ldb-develamazon-linux-2023-upgrade-python3-sambaamazon-linux-2023-upgrade-python3-samba-dcamazon-linux-2023-upgrade-python3-samba-dc-debuginfoamazon-linux-2023-upgrade-python3-samba-debuginfoamazon-linux-2023-upgrade-python3-samba-develamazon-linux-2023-upgrade-python3-samba-testamazon-linux-2023-upgrade-python-ldb-devel-commonamazon-linux-2023-upgrade-sambaamazon-linux-2023-upgrade-samba-clientamazon-linux-2023-upgrade-samba-client-debuginfoamazon-linux-2023-upgrade-samba-client-libsamazon-linux-2023-upgrade-samba-client-libs-debuginfoamazon-linux-2023-upgrade-samba-commonamazon-linux-2023-upgrade-samba-common-libsamazon-linux-2023-upgrade-samba-common-libs-debuginfoamazon-linux-2023-upgrade-samba-common-toolsamazon-linux-2023-upgrade-samba-common-tools-debuginfoamazon-linux-2023-upgrade-samba-dcerpcamazon-linux-2023-upgrade-samba-dcerpc-debuginfoamazon-linux-2023-upgrade-samba-dc-libsamazon-linux-2023-upgrade-samba-dc-libs-debuginfoamazon-linux-2023-upgrade-samba-debuginfoamazon-linux-2023-upgrade-samba-debugsourceamazon-linux-2023-upgrade-samba-develamazon-linux-2023-upgrade-samba-krb5-printingamazon-linux-2023-upgrade-samba-krb5-printing-debuginfoamazon-linux-2023-upgrade-samba-ldb-ldap-modulesamazon-linux-2023-upgrade-samba-ldb-ldap-modules-debuginfoamazon-linux-2023-upgrade-samba-libsamazon-linux-2023-upgrade-samba-libs-debuginfoamazon-linux-2023-upgrade-samba-pidlamazon-linux-2023-upgrade-samba-testamazon-linux-2023-upgrade-samba-test-debuginfoamazon-linux-2023-upgrade-samba-test-libsamazon-linux-2023-upgrade-samba-test-libs-debuginfoamazon-linux-2023-upgrade-samba-toolsamazon-linux-2023-upgrade-samba-usersharesamazon-linux-2023-upgrade-samba-vfs-iouringamazon-linux-2023-upgrade-samba-vfs-iouring-debuginfoamazon-linux-2023-upgrade-samba-winbindamazon-linux-2023-upgrade-samba-winbind-clientsamazon-linux-2023-upgrade-samba-winbind-clients-debuginfoamazon-linux-2023-upgrade-samba-winbind-debuginfoamazon-linux-2023-upgrade-samba-winbind-krb5-locatoramazon-linux-2023-upgrade-samba-winbind-krb5-locator-debuginfoamazon-linux-2023-upgrade-samba-winbind-modulesamazon-linux-2023-upgrade-samba-winbind-modules-debuginfo | Feb 17, 2025 | Mar 29, 2023 | |
| Debian | debian-upgrade-samba | Jul 30, 2024 | Apr 3, 2023 | |
| Freebsd | freebsd-upgrade-package-samba416freebsd-upgrade-package-samba417freebsd-upgrade-package-samba418 | Apr 14, 2023 | Apr 7, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-net-fs-samba | Sep 18, 2023 | Apr 3, 2023 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-libldb | Jan 10, 2024 | Apr 3, 2023 | |
| Samba | samba-upgrade-4_16_10samba-upgrade-4_17_7samba-upgrade-4_18_1 | Apr 27, 2023 | Apr 3, 2023 | |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-ctdb-pcp-pmdasuse-upgrade-ldb-toolssuse-upgrade-libldb-develsuse-upgrade-libldb2suse-upgrade-libldb2-32bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-policy0-python3-32bitsuse-upgrade-python3-ldbsuse-upgrade-python3-ldb-32bitsuse-upgrade-python3-ldb-develsuse-upgrade-sambasuse-upgrade-samba-ad-dcsuse-upgrade-samba-ad-dc-libssuse-upgrade-samba-ad-dc-libs-32bitsuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-client-libssuse-upgrade-samba-client-libs-32bitsuse-upgrade-samba-develsuse-upgrade-samba-devel-32bitsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-gpupdatesuse-upgrade-samba-ldb-ldapsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-python3suse-upgrade-samba-testsuse-upgrade-samba-toolsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-libssuse-upgrade-samba-winbind-libs-32bit | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | ubuntu-upgrade-libldb2ubuntu-upgrade-samba | Apr 10, 2023 | Apr 3, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Apr 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub