CVE-2018-14628

samba-ad-dc: An information leak vulnerability was discovered in Samba's LDAP server.Due to missing access control checks, an auth...

CVE-2018-14628 is fixed in 75 products on 1 platform, first by ctdb 2:4.19.4+dfsg-3ubuntu1, released January 17, 2023. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
4.3
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0120
68th percentile

An information leak vulnerability was discovered in Samba's LDAP server.Due to missing access control checks, an authenticated but unprivilegedattacker could discover the names and preserved attributes of deletedobjects in the LDAP store.

Where it's fixed

ProductFixed inFixReleased
Linux
ctdb · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 ctdb 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
ctdb · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 ctdb 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
ctdb · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 ctdb 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
ldb-tools · Ubuntu 24.04.5 LTS (noble) 2:2.8.0+samba4.19.4+dfsg-3ubuntu1 ldb-tools 2:2.8.0+samba4.19.4+dfsg-3ubuntu1 Jan 17, 2023
ldb-tools · Ubuntu 24.10 (oracular) 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 ldb-tools 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 Oct 10, 2023
ldb-tools · Ubuntu 25.04 (plucky) 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 ldb-tools 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libldb2 · Ubuntu 24.04.5 LTS (noble) 2:2.8.0+samba4.19.4+dfsg-3ubuntu1 libldb2 2:2.8.0+samba4.19.4+dfsg-3ubuntu1 Jan 17, 2023
libldb2 · Ubuntu 24.10 (oracular) 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 libldb2 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libldb2 · Ubuntu 25.04 (plucky) 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 libldb2 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libnetapi · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
libnetapi-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
libnetapi-devel · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
libnss-winbind · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 libnss-winbind 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
libnss-winbind · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 libnss-winbind 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libnss-winbind · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 libnss-winbind 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libpam-winbind · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 libpam-winbind 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
libpam-winbind · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 libpam-winbind 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libpam-winbind · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 libpam-winbind 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libsmbclient · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 libsmbclient 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
libsmbclient · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
libsmbclient-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
libsmbclient-devel · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
libsmbclient0 · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 libsmbclient0 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libsmbclient0 · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 libsmbclient0 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libwbclient · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
libwbclient-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
libwbclient-devel · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
libwbclient0 · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 libwbclient0 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
libwbclient0 · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 libwbclient0 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libwbclient0 · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 libwbclient0 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
python3-ldb · Ubuntu 24.04.5 LTS (noble) 2:2.8.0+samba4.19.4+dfsg-3ubuntu1 python3-ldb 2:2.8.0+samba4.19.4+dfsg-3ubuntu1 Jan 17, 2023
python3-ldb · Ubuntu 24.10 (oracular) 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 python3-ldb 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 Oct 10, 2023
python3-ldb · Ubuntu 25.04 (plucky) 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 python3-ldb 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 Oct 10, 2023
python3-samba · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 python3-samba 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
python3-samba · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 python3-samba 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
python3-samba · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 python3-samba 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
python3-samba · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
python3-samba-dc · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
python3-samba-dc-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
python3-samba-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
python3-samba-devel · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
python3-samba-test · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
registry-tools · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 registry-tools 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
registry-tools · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 registry-tools 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
registry-tools · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 registry-tools 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba · Debian 12.15 (bookworm) 2:4.17.12+dfsg-0+deb12u3 DEBIAN-CVE-2018-14628 Jan 17, 2023
samba · Debian 13.5 (trixie) 2:4.19.3+dfsg-1 DEBIAN-CVE-2018-14628 Jan 17, 2023
samba · Debian 14 2:4.19.3+dfsg-1 DEBIAN-CVE-2018-14628 Jan 17, 2023
samba · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-ad-dc · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba-ad-dc 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba-ad-dc · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-ad-dc 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-ad-dc · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-ad-dc 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-ad-provision · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba-ad-provision 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba-ad-provision · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-ad-provision 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-ad-provision · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-ad-provision 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-client · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-client-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-client-libs · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-client-libs-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-common · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba-common 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba-common · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-common 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-common · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-common 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-common · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-common-bin · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba-common-bin 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba-common-bin · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-common-bin 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-common-bin · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-common-bin 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-common-libs · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-common-libs-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-common-tools · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-common-tools-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-dc-libs · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-dc-libs-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-dcerpc · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-dcerpc-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-debugsource · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-devel · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-dsdb-modules · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba-dsdb-modules 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba-dsdb-modules · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-dsdb-modules 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-dsdb-modules · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-dsdb-modules 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-krb5-printing · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-krb5-printing-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-ldb-ldap-modules · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-ldb-ldap-modules-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-libs · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba-libs 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba-libs · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-libs 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-libs · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-libs 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-libs · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-libs-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-pidl · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-test · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-test-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-test-libs · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-test-libs-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-testsuite · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba-testsuite 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba-testsuite · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-testsuite 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-testsuite · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-testsuite 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-tools · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-usershares · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-vfs-ceph · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-vfs-ceph 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-vfs-glusterfs · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-vfs-glusterfs 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-vfs-iouring · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-vfs-iouring-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-vfs-modules · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba-vfs-modules 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba-vfs-modules · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-vfs-modules 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-vfs-modules · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-vfs-modules 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-vfs-modules-extra · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 samba-vfs-modules-extra 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
samba-vfs-modules-extra · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-vfs-modules-extra 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-vfs-modules-extra · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-vfs-modules-extra 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-winbind · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-winbind-clients · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-winbind-clients-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-winbind-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-winbind-krb5-locator · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-winbind-krb5-locator-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-winbind-modules · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
samba-winbind-modules-debuginfo · amzn 2023 2:4.17.8-0.amzn2023.0.2 ALAS2023-2023-206 Jun 5, 2023
smbclient · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 smbclient 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
smbclient · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 smbclient 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
smbclient · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 smbclient 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
winbind · Ubuntu 24.04.5 LTS (noble) 2:4.19.4+dfsg-3ubuntu1 winbind 2:4.19.4+dfsg-3ubuntu1 Jan 17, 2023
winbind · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 winbind 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
winbind · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 winbind 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.