CVE-2018-14628

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "37"
                },
                {
                    "last_affected": "37"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "fedoraproject:fedora",
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*"
            ]
        }
    ]
}

References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type

GIT

Repo

https://github.com/samba-team/samba

Events

Introduced

df33344d8eb40221d60c99931690703a11d91bc2

Fixed

2669b77d97b55542b6f2bc80c72cf699399e8ec8

Introduced

b7921852ad6ac048abbbe577b9faced2d694c685

Fixed

fcd094b208f9db4ad77ad75061446099b5ea26cf

Database specific

{
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.18.9"
        },
        {
            "introduced": "4.19.0"
        },
        {
            "fixed": "4.19.3"
        }
    ]
}

Affected versions

samba-4.*

samba-4.19.0

samba-4.19.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-14628.json"