The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Apr 3, 2023 |
| Amazon_linux_2023 | — | Upgrade libldb-debuginfoUpgrade python3-samba-dcUpgrade libsmbclient-debuginfoUpgrade samba-toolsUpgrade python3-ldb-develUpgrade ldb-toolsUpgrade libldbUpgrade samba-test-libs-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade libnetapi-debuginfoUpgrade libwbclientUpgrade python3-ldb-debuginfoUpgrade samba-client-libsUpgrade python3-sambaUpgrade samba-debugsourceUpgrade samba-debuginfoUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-develUpgrade ldb-tools-debuginfoUpgrade samba-common-tools-debuginfoUpgrade samba-testUpgrade samba-krb5-printingUpgrade samba-vfs-iouringUpgrade samba-test-debuginfoUpgrade samba-winbind-modules-debuginfoUpgrade libnetapi-develUpgrade libwbclient-develUpgrade samba-common-libs-debuginfoUpgrade libldb-debugsourceUpgrade sambaUpgrade samba-ldb-ldap-modulesUpgrade samba-pidlUpgrade libwbclient-debuginfoUpgrade samba-usersharesUpgrade samba-develUpgrade python3-samba-dc-debuginfoUpgrade samba-commonUpgrade samba-winbindUpgrade samba-vfs-iouring-debuginfoUpgrade libnetapiUpgrade python3-samba-testUpgrade python3-ldbUpgrade samba-winbind-clients-debuginfoUpgrade samba-common-libsUpgrade samba-winbind-debuginfoUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-client-libs-debuginfoUpgrade samba-clientUpgrade samba-libsUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libsmbclient-develUpgrade samba-test-libsUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-dcerpcUpgrade samba-libs-debuginfoUpgrade python3-samba-debuginfoUpgrade libldb-develUpgrade python-ldb-devel-commonUpgrade samba-client-debuginfoUpgrade samba-winbind-clientsUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-tools | Feb 17, 2025 | Mar 29, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 3, 2023 |
| Freebsd | — | Upgrade samba418Upgrade samba417Upgrade samba416 | Apr 14, 2023 | Apr 7, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Apr 3, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libldb | Jan 10, 2024 | Apr 3, 2023 |
| Samba | — | Upgrade to Samba 4.16.10 or later.Upgrade to Samba 4.18.1 or later.Upgrade to Samba 4.17.7 or later. | Apr 27, 2023 | Apr 3, 2023 |
| Suse | — | Upgrade samba-client-libs-32bitUpgrade samba-libs-python3Upgrade samba-devel-32bitUpgrade samba-client-libsUpgrade python3-ldb-32bitUpgrade ctdbUpgrade samba-libs-32bitUpgrade samba-gpupdateUpgrade libldb2-32bitUpgrade samba-libsUpgrade samba-winbind-libsUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy0-python3Upgrade samba-develUpgrade samba-cephUpgrade samba-python3Upgrade ldb-toolsUpgrade samba-testUpgrade samba-ldb-ldapUpgrade samba-dsdb-modulesUpgrade python3-ldb-develUpgrade libldb-develUpgrade sambaUpgrade samba-winbindUpgrade samba-ad-dc-libs-32bitUpgrade samba-ad-dc-libsUpgrade python3-ldbUpgrade ctdb-pcp-pmdaUpgrade samba-libs-python3-32bitUpgrade libsamba-policy-develUpgrade libsamba-policy-python3-develUpgrade samba-client-32bitUpgrade samba-ad-dcUpgrade samba-winbind-libs-32bitUpgrade libldb2Upgrade samba-toolUpgrade samba-clientUpgrade samba-doc | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade libldb2Upgrade samba | Apr 10, 2023 | Apr 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub