VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 17, 2023· Updated Feb 13, 2025

CVE-2018-14628

CVE-2018-14628

Description

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

Affected products

44

Patches

2
2669b77d97b5

VERSION: Disable GIT_SNAPSHOT for the 4.18.9 release.

https://github.com/samba-team/sambaJule AngerNov 29, 2023via osv
commit
1 file changed · +1 −1
  • VERSION+1 −1 modified
    @@ -99,7 +99,7 @@ SAMBA_VERSION_RC_RELEASE=
 # e.g. SAMBA_VERSION_IS_SVN_SNAPSHOT=yes               #
 #  ->  "3.0.0-SVN-build-199"                           #
 ########################################################
-SAMBA_VERSION_IS_GIT_SNAPSHOT=yes
+SAMBA_VERSION_IS_GIT_SNAPSHOT=no
 
 ########################################################
 # This is for specifying a release nickname            #
fcd094b208f9

VERSION: Disable GIT_SNAPSHOT for the 4.19.3 release.

https://github.com/samba-team/sambaJule AngerNov 27, 2023via osv
commit
1 file changed · +1 −1
  • VERSION+1 −1 modified
    @@ -99,7 +99,7 @@ SAMBA_VERSION_RC_RELEASE=
 # e.g. SAMBA_VERSION_IS_SVN_SNAPSHOT=yes               #
 #  ->  "3.0.0-SVN-build-199"                           #
 ########################################################
-SAMBA_VERSION_IS_GIT_SNAPSHOT=yes
+SAMBA_VERSION_IS_GIT_SNAPSHOT=no
 
 ########################################################
 # This is for specifying a release nickname            #

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

5

News mentions

0

No linked articles in our index yet.