Medium severity4.3NVD Advisory· Published Jan 17, 2023· Updated Jun 17, 2026
CVE-2018-14628
CVE-2018-14628
Description
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
47cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*range: >=4.0.0,<4.18.9
- (no CPE)
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- Samba/LDAP serverdescription
- osv-coords43 versionspkg:apk/chainguard/libauth-sambapkg:apk/chainguard/libsmbclientpkg:apk/chainguard/libwbclientpkg:apk/chainguard/py3.13-sambapkg:apk/chainguard/sambapkg:apk/chainguard/samba-clientpkg:apk/chainguard/samba-commonpkg:apk/chainguard/samba-common-server-libspkg:apk/chainguard/samba-common-toolspkg:apk/chainguard/samba-devpkg:apk/chainguard/samba-libnss-winbindpkg:apk/chainguard/samba-libspkg:apk/chainguard/samba-libs-py3pkg:apk/chainguard/samba-pam-winbindpkg:apk/chainguard/samba-serverpkg:apk/chainguard/samba-server-libspkg:apk/chainguard/samba-testpkg:apk/chainguard/samba-util-libspkg:apk/chainguard/samba-winbind-clientspkg:apk/chainguard/samba-winbind-krb5-locatorpkg:apk/chainguard/winbindpkg:apk/wolfi/libauth-sambapkg:apk/wolfi/libsmbclientpkg:apk/wolfi/libwbclientpkg:apk/wolfi/py3.13-sambapkg:apk/wolfi/sambapkg:apk/wolfi/samba-clientpkg:apk/wolfi/samba-commonpkg:apk/wolfi/samba-common-server-libspkg:apk/wolfi/samba-common-toolspkg:apk/wolfi/samba-devpkg:apk/wolfi/samba-libnss-winbindpkg:apk/wolfi/samba-libspkg:apk/wolfi/samba-libs-py3pkg:apk/wolfi/samba-pam-winbindpkg:apk/wolfi/samba-serverpkg:apk/wolfi/samba-server-libspkg:apk/wolfi/samba-testpkg:apk/wolfi/samba-util-libspkg:apk/wolfi/samba-winbind-clientspkg:apk/wolfi/samba-winbind-krb5-locatorpkg:apk/wolfi/winbindpkg:rpm/opensuse/samba&distro=openSUSE%20Tumbleweed
< 4.23.2-r0+ 42 more
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.23.2-r0
- (no CPE)range: < 4.19.4+git.339.acf1ccaa020-1.1
Patches
Vulnerability mechanics
References
6- lists.fedoraproject.org/archives/list/[email protected]/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/nvdPatchThird Party Advisory
- lists.fedoraproject.org/archives/list/[email protected]/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/nvdPatchThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingPatchThird Party Advisory
- bugzilla.samba.org/show_bug.cginvdExploitIssue TrackingPatchVendor Advisory
- security.netapp.com/advisory/ntap-20230223-0008/nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2023/11/28/4nvdMailing List
News mentions
0No linked articles in our index yet.