The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 21, 2024 | Apr 3, 2023 |
| Amazon_linux_2023 | — | Upgrade samba-pidlUpgrade libnetapi-develUpgrade samba-dc-libs-debuginfoUpgrade python3-ldb-develUpgrade libsmbclient-debuginfoUpgrade libldb-debugsourceUpgrade libwbclient-develUpgrade samba-commonUpgrade samba-test-debuginfoUpgrade ldb-toolsUpgrade samba-vfs-iouringUpgrade sambaUpgrade samba-common-tools-debuginfoUpgrade python3-ldb-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-krb5-printingUpgrade python3-samba-develUpgrade samba-testUpgrade ldb-tools-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade samba-winbind-modules-debuginfoUpgrade python3-samba-dc-debuginfoUpgrade libldbUpgrade samba-debuginfoUpgrade samba-client-libsUpgrade python3-sambaUpgrade libwbclientUpgrade samba-winbindUpgrade libnetapi-debuginfoUpgrade python3-samba-dcUpgrade samba-debugsourceUpgrade samba-develUpgrade libwbclient-debuginfoUpgrade samba-toolsUpgrade samba-test-libs-debuginfoUpgrade libldb-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-usersharesUpgrade samba-winbind-modulesUpgrade samba-winbind-debuginfoUpgrade samba-clientUpgrade libsmbclient-develUpgrade samba-dcerpcUpgrade samba-client-debuginfoUpgrade samba-ldb-ldap-modules-debuginfoUpgrade libnetapiUpgrade python-ldb-devel-commonUpgrade libldb-develUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-libs-debuginfoUpgrade samba-libsUpgrade python3-ldbUpgrade libsmbclientUpgrade samba-test-libsUpgrade python3-samba-debuginfoUpgrade samba-client-libs-debuginfoUpgrade samba-winbind-clientsUpgrade samba-krb5-printing-debuginfoUpgrade samba-common-toolsUpgrade python3-samba-testUpgrade samba-common-libsUpgrade samba-winbind-clients-debuginfoUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libs | Feb 17, 2025 | Mar 29, 2023 |
| Debian | — | Upgrade samba | Jul 30, 2024 | Apr 3, 2023 |
| Freebsd | — | Upgrade samba416Upgrade samba418Upgrade samba417 | Apr 14, 2023 | Apr 7, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Sep 18, 2023 | Apr 3, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libldb | Jan 10, 2024 | Apr 3, 2023 |
| Samba | — | Upgrade to Samba 4.17.7 or later.Upgrade to Samba 4.18.1 or later.Upgrade to Samba 4.16.10 or later. | Apr 27, 2023 | Apr 3, 2023 |
| Suse | — | Upgrade libldb-develUpgrade samba-client-32bitUpgrade samba-ad-dcUpgrade samba-winbind-libs-32bitUpgrade samba-docUpgrade samba-toolUpgrade samba-clientUpgrade samba-winbindUpgrade samba-libs-python3-32bitUpgrade python3-ldb-develUpgrade samba-ad-dc-libs-32bitUpgrade libldb2Upgrade samba-ad-dc-libsUpgrade ctdb-pcp-pmdaUpgrade libsamba-policy-python3-develUpgrade python3-ldbUpgrade libsamba-policy-develUpgrade sambaUpgrade samba-dsdb-modulesUpgrade python3-ldb-32bitUpgrade samba-testUpgrade samba-libs-python3Upgrade samba-cephUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy0-python3Upgrade samba-gpupdateUpgrade libldb2-32bitUpgrade samba-libs-32bitUpgrade ldb-toolsUpgrade samba-develUpgrade samba-libsUpgrade samba-client-libsUpgrade samba-ldb-ldapUpgrade samba-winbind-libsUpgrade samba-devel-32bitUpgrade samba-python3Upgrade samba-client-libs-32bitUpgrade ctdb | Mar 30, 2023 | Mar 29, 2023 |
| Ubuntu | — | Upgrade sambaUpgrade libldb2 | Apr 10, 2023 | Apr 3, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub