An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Mar 26, 2024 | Jan 17, 2023 |
| Amazon_linux_2023 | — | Upgrade python3-samba-debuginfoUpgrade samba-client-debuginfoUpgrade samba-client-libsUpgrade samba-common-tools-debuginfoUpgrade samba-winbind-krb5-locator-debuginfoUpgrade samba-common-libs-debuginfoUpgrade samba-dcerpc-debuginfoUpgrade samba-common-toolsUpgrade samba-testUpgrade samba-common-libsUpgrade samba-winbind-clients-debuginfoUpgrade libwbclientUpgrade samba-krb5-printing-debuginfoUpgrade libnetapiUpgrade samba-winbind-krb5-locatorUpgrade libwbclient-develUpgrade samba-client-libs-debuginfoUpgrade samba-ldb-ldap-modulesUpgrade python3-samba-testUpgrade python3-sambaUpgrade samba-usersharesUpgrade libnetapi-debuginfoUpgrade samba-winbind-debuginfoUpgrade samba-winbind-clientsUpgrade python3-samba-develUpgrade samba-ldb-ldap-modules-debuginfoUpgrade samba-clientUpgrade samba-dcerpcUpgrade samba-debuginfoUpgrade samba-pidlUpgrade samba-libsUpgrade libsmbclientUpgrade samba-dc-libs-debuginfoUpgrade python3-samba-dcUpgrade libnetapi-develUpgrade samba-dc-libsUpgrade samba-krb5-printingUpgrade samba-debugsourceUpgrade samba-winbind-modulesUpgrade samba-winbind-modules-debuginfoUpgrade samba-test-libsUpgrade sambaUpgrade samba-winbindUpgrade libsmbclient-develUpgrade samba-toolsUpgrade samba-test-debuginfoUpgrade libwbclient-debuginfoUpgrade samba-test-libs-debuginfoUpgrade samba-commonUpgrade python3-samba-dc-debuginfoUpgrade libsmbclient-debuginfoUpgrade samba-vfs-iouring-debuginfoUpgrade samba-vfs-iouringUpgrade samba-libs-debuginfoUpgrade samba-devel | Feb 17, 2025 | Apr 13, 2022 |
| Debian | — | Upgrade samba | May 15, 2025 | Jan 17, 2023 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Feb 21, 2024 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade samba-common-toolsUpgrade samba-clientUpgrade libwbclientUpgrade samba-winbindUpgrade libsmbclientUpgrade samba-commonUpgrade samba-libsUpgrade sambaUpgrade samba-winbind-modulesUpgrade samba-winbind-clients | Apr 9, 2024 | Jan 17, 2023 |
| Ubuntu | — | Upgrade samba | Nov 19, 2024 | Jan 17, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Jan 17, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub