MediumFix available
samba — security advisory
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
- Products
- samba
- Affected versions
- 2:4.17.10+dfsg-0+deb12u1, 2:4.17.10+dfsg-0+deb12u1~bpo11+1, 2:4.17.11+dfsg-0+deb12u1, 2:4.17.12+dfsg-0+deb12u1, 2:4.17.12+dfsg-0+deb12u1~bpo11+1, 2:4.17.12+dfsg-0+deb12u2, 2:4.17.8+dfsg-2, 2:4.17.8+dfsg-2.1, 2:4.17.9+dfsg-0+deb12u1, 2:4.17.9+dfsg-0+deb12u2, 2:4.17.9+dfsg-0+deb12u3, 2:4.17.9+dfsg-0+deb12u3~bpo11+1
- Fixed versions
- 2:4.17.12+dfsg-0+deb12u3, 2:4.19.3+dfsg-1
- CVEs
- CVE-2018-14628
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 00:47 UTC · Revision 1
Source evidence
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
osv:DEBIAN-CVE-2018-14628
samba
Fixed versions: 2:4.17.12+dfsg-0+deb12u3
samba
Fixed versions: 2:4.19.3+dfsg-1
samba
Fixed versions: 2:4.19.3+dfsg-1
Complete source record
{
"id": "3b45440b4f9e2b1f649b65259a1315a176afd3ab9cf163b8cec60da99aae0ca7",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2018-14628",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2018-14628",
"summary": "An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.",
"evidence": "osv:DEBIAN-CVE-2018-14628",
"products": [
{
"name": {
"value": "samba",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:4.17.12+dfsg-0+deb12u3",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "2:4.17.10+dfsg-0+deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.10+dfsg-0+deb12u1~bpo11+1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.11+dfsg-0+deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.12+dfsg-0+deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.12+dfsg-0+deb12u1~bpo11+1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.12+dfsg-0+deb12u2",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.8+dfsg-2",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.8+dfsg-2.1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.9+dfsg-0+deb12u1",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.9+dfsg-0+deb12u2",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.9+dfsg-0+deb12u3",
"evidence": "/affected/0/versions"
},
{
"value": "2:4.17.9+dfsg-0+deb12u3~bpo11+1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "samba",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:4.19.3+dfsg-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "samba",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:4.19.3+dfsg-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "DEBIAN-CVE-2018-14628",
"aliases": [
"DEBIAN-CVE-2018-14628"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.17.12+dfsg-0+deb12u3"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"versions": [
"2:4.17.10+dfsg-0+deb12u1",
"2:4.17.10+dfsg-0+deb12u1~bpo11+1",
"2:4.17.11+dfsg-0+deb12u1",
"2:4.17.12+dfsg-0+deb12u1",
"2:4.17.12+dfsg-0+deb12u1~bpo11+1",
"2:4.17.12+dfsg-0+deb12u2",
"2:4.17.8+dfsg-2",
"2:4.17.8+dfsg-2.1",
"2:4.17.9+dfsg-0+deb12u1",
"2:4.17.9+dfsg-0+deb12u2",
"2:4.17.9+dfsg-0+deb12u3",
"2:4.17.9+dfsg-0+deb12u3~bpo11+1"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-14628.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.19.3+dfsg-1"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-14628.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.19.3+dfsg-1"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2018-14628.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-23T18:03:47.624759743Z",
"provider": "osv",
"upstream": [
"CVE-2018-14628"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2018-14628"
]
},
"related_cves": [
{
"value": "CVE-2018-14628",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 422251,
"published_at": "2023-01-17T18:15:10.81+00:00"
}