CVE-2018-14628

Description

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

Scores

Faiblesses (CWE)

• CWE-862

Références européennes

• ENISA EUVD · EUVD-2018-6534
• GCVE · GCVE-0-2018-14628

Avis du CERT-FR

• CERTFR-2025-AVI-0969 — Multiples vulnérabilités dans les produits VMware · cert.ssi.gouv.fr
• CERTFR-2024-AVI-0423 — Multiples vulnérabilités dans les produits NetApp · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

• cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 4.0.0 < 4.18.9
• cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 4.19.0 < 4.19.3
• cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Produits affectés

Références

• https://bugzilla.samba.org/show_bug.cgi?id=13595
• https://bugzilla.redhat.com/show_bug.cgi?id=1625445
• http://www.openwall.com/lists/oss-security/2023/11/28/4
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/
• https://security.netapp.com/advisory/ntap-20230223-0008/

Sources