CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi...
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
- Record
CVE-2023-0614- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-200, CWE-312
- Updated
- 2026-11-02
CVE List
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
- Record
CVE-2023-0614- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2023-12649
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
- Record
EUVD-2023-12649- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8pwj-3gh6-824j
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi...
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
- Record
GHSA-8pwj-3gh6-824j- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200, CWE-312
- Updated
- 2026-11-02
OSVAZL-26697
CVE-2023-0614 affecting package samba 4.12.5-7
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
- Record
AZL-26697- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVAZL-37019
CVE-2023-0614 affecting package samba for versions less than 4.18.3-1
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
- Record
AZL-37019- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 12 moreShow less
OSV
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
- Record
CVE-2023-0614- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
- Record
DEBIAN-CVE-2023-0614- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
- Record
UBUNTU-CVE-2023-0614- CVSS 3.1
- 7.7 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVMGASA-2023-0127 No score
Updated ldb/samba packages fix security vulnerability
Deletion of AD DC "dnsHostname" attribute by unprivileged authenticated users (CVE-2023-0225) Read access controlled AD LDAP attributes (CVE-2023-0614) Cleartext password sending by AD DC admin tool (CVE-2023-0922)
- Record
MGASA-2023-0127- Updated
- 2026-11-02
OSVOESA-2023-1220 No score
libldb security update
An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases.
Security Fix(es):
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.(CVE-2023-0614)
- Record
OESA-2023-1220- Updated
- 2026-11-02
OSVOESA-2023-1221 No score
libldb security update
An extensible library that implements an LDAP like API to access remote LDAP servers, or use local tdb databases.
Security Fix(es):
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.(CVE-2023-0614)
- Record
OESA-2023-1221- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12830-1 No score
ldb-tools-2.7.2-1.1 on GA media
These are all security issues fixed in the ldb-tools-2.7.2-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12830-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12831-1 No score
ctdb-4.18.1+git.298.4ccf830b2a4-1.1 on GA media
These are all security issues fixed in the ctdb-4.18.1+git.298.4ccf830b2a4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12831-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1687-1 No score
Security update for ldb, samba
This update for ldb, samba fixes the following issues:
ldb:
- CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
samba:
- CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).
- CVE-2023-0225: Fixed deletion of AD DC 'dnsHostname' attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
The following non-security bug was fixed:
- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).
- Record
SUSE-SU-2023:1687-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:1689-1 No score
Security update for ldb, samba
This update for ldb, samba fixes the following issues:
ldb:
- CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
samba:
- CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).
- CVE-2023-0225: Fixed deletion of AD DC 'dnsHostname' attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).
- CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).
The following non-security bug were fixed:
- Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).
- Ship missing samba-winbind-libs-32bit package (bsc#1207996)
- Ship missing samba-libs to SLE Micro 5.3 (bsc#1207723)
- Record
SUSE-SU-2023:1689-1- Updated
- 2026-11-02
OSVUSN-5992-1 No score
ldb vulnerability
Demi Marie Obenour discovered that ldb, when used with Samba, incorrectly handled certain confidential attribute values. A remote authenticated attacker could possibly use this issue to obtain certain sensitive information.
- Record
USN-5992-1- Updated
- 2026-11-02
OSVUSN-5993-1 No score
samba vulnerabilities
Demi Marie Obenour discovered that the Samba LDAP server incorrectly handled certain confidential attribute values. A remote authenticated attacker could possibly use this issue to obtain certain sensitive information. (CVE-2023-0614)
Andrew Bartlett discovered that the Samba AD DC admin tool incorrectly sent passwords in cleartext. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2023-0922)
- Record
USN-5993-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaAzure Linux:2 |
through 4.12.5-7 | None known |
sambaAzure Linux:3 |
before 4.18.3-1 | 4.18.3-1 |
sambaDebian:12 |
before 2:4.17.7+dfsg-1 | 2:4.17.7+dfsg-1 |
sambaDebian:13 |
before 2:4.17.7+dfsg-1 | 2:4.17.7+dfsg-1 |
sambaDebian:14 |
before 2:4.17.7+dfsg-1 | 2:4.17.7+dfsg-1 |
ldbMageia:8 From an advisory covering 3 CVEs |
before 2.5.3-1.mga8 | 2.5.3-1.mga8 |
sambaMageia:8 From an advisory covering 3 CVEs |
before 4.16.10-1.mga8 | 4.16.10-1.mga8 |
libldbopenEuler:22.03-LTS-SP1 |
before 2.6.1-2.oe2203sp1 | 2.6.1-2.oe2203sp1 |
libldbopenEuler:22.03-LTS |
before 2.4.1-3.oe2203 | 2.4.1-3.oe2203 |
sambaSUSE:Linux Enterprise High Availability Extension 15 SP3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
Show 44 moreShow less
| Package | Affected | Fixed |
|---|---|---|
ldbSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Manager Proxy 4.2 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Manager Proxy 4.2 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Manager Server 4.2 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Manager Server 4.2 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Micro 5.1 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
ldbSUSE:Linux Enterprise Micro 5.2 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Linux Enterprise Micro 5.2 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 2.4.4-150300.3.23.1 | 2.4.4-150300.3.23.1 |
sambaSUSE:Enterprise Storage 7.1 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 | 4.15.13+git.636.53d93c5b9d6-150300.3.52.1 |
ldbSUSE:Linux Enterprise Micro 5.3 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaSUSE:Linux Enterprise Micro 5.3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbSUSE:Linux Enterprise Micro 5.4 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaSUSE:Linux Enterprise Micro 5.4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaSUSE:Linux Enterprise Module for Basesystem 15 SP4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
sambaSUSE:Linux Enterprise High Availability Extension 15 SP4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbopenSUSE:Leap Micro 5.3 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaopenSUSE:Leap Micro 5.3 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbopenSUSE:Leap 15.4 From an advisory covering 4 CVEs |
before 2.4.4-150400.4.11.1 | 2.4.4-150400.4.11.1 |
sambaopenSUSE:Leap 15.4 From an advisory covering 4 CVEs |
before 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 | 4.15.13+git.636.53d93c5b9d6-150400.3.23.1 |
ldbUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1:1.1.15-1.11:1.1.16-11:1.1.16-1ubuntu0.11:1.1.24-0ubuntu0.14.04.11:1.1.24-0ubuntu0.14.04.21:1.1.24-0ubuntu0.14.04.2+esm1 |
None known |
sambaUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 2:3.6.18-1ubuntu32:4.0.10+dfsg-4ubuntu22:4.0.13+dfsg-1ubuntu12:4.1.3+dfsg-2ubuntu22:4.1.3+dfsg-2ubuntu3 Show 45 moreShow less2:4.1.3+dfsg-2ubuntu42:4.1.3+dfsg-2ubuntu52:4.1.6+dfsg-1ubuntu12:4.1.6+dfsg-1ubuntu22:4.1.6+dfsg-1ubuntu2.14.04.12:4.1.6+dfsg-1ubuntu2.14.04.22:4.1.6+dfsg-1ubuntu2.14.04.32:4.1.6+dfsg-1ubuntu2.14.04.42:4.1.6+dfsg-1ubuntu2.14.04.52:4.1.6+dfsg-1ubuntu2.14.04.72:4.1.6+dfsg-1ubuntu2.14.04.82:4.1.6+dfsg-1ubuntu2.14.04.92:4.1.6+dfsg-1ubuntu2.14.04.112:4.1.6+dfsg-1ubuntu2.14.04.122:4.1.6+dfsg-1ubuntu2.14.04.132:4.3.8+dfsg-0ubuntu0.14.04.22:4.3.9+dfsg-0ubuntu0.14.04.12:4.3.9+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.12:4.3.11+dfsg-0ubuntu0.14.04.22:4.3.11+dfsg-0ubuntu0.14.04.32:4.3.11+dfsg-0ubuntu0.14.04.42:4.3.11+dfsg-0ubuntu0.14.04.62:4.3.11+dfsg-0ubuntu0.14.04.72:4.3.11+dfsg-0ubuntu0.14.04.82:4.3.11+dfsg-0ubuntu0.14.04.92:4.3.11+dfsg-0ubuntu0.14.04.102:4.3.11+dfsg-0ubuntu0.14.04.112:4.3.11+dfsg-0ubuntu0.14.04.122:4.3.11+dfsg-0ubuntu0.14.04.132:4.3.11+dfsg-0ubuntu0.14.04.142:4.3.11+dfsg-0ubuntu0.14.04.162:4.3.11+dfsg-0ubuntu0.14.04.172:4.3.11+dfsg-0ubuntu0.14.04.192:4.3.11+dfsg-0ubuntu0.14.04.202:4.3.11+dfsg-0ubuntu0.14.04.20+esm12:4.3.11+dfsg-0ubuntu0.14.04.20+esm22:4.3.11+dfsg-0ubuntu0.14.04.20+esm32:4.3.11+dfsg-0ubuntu0.14.04.20+esm42:4.3.11+dfsg-0ubuntu0.14.04.20+esm62:4.3.11+dfsg-0ubuntu0.14.04.20+esm72:4.3.11+dfsg-0ubuntu0.14.04.20+esm82:4.3.11+dfsg-0ubuntu0.14.04.20+esm92:4.3.11+dfsg-0ubuntu0.14.04.20+esm112:4.3.11+dfsg-0ubuntu0.14.04.20+esm12 |
None known |
ldbUbuntu:16.04:LTS |
All versions, plus listed versions 2:1.1.20-22:1.1.21-12:1.1.23-12:1.1.23-1ubuntu12:1.1.24-1ubuntu12:1.1.24-1ubuntu32:1.1.24-1ubuntu3.12:1.1.24-1ubuntu3.2 |
None known |
sambaUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2:4.1.17+dfsg-4ubuntu22:4.1.20+dfsg-1ubuntu12:4.1.20+dfsg-1ubuntu22:4.1.20+dfsg-1ubuntu32:4.1.20+dfsg-1ubuntu5 Show 41 moreShow less2:4.3.3+dfsg-1ubuntu12:4.3.3+dfsg-1ubuntu22:4.3.3+dfsg-1ubuntu32:4.3.6+dfsg-1ubuntu12:4.3.8+dfsg-0ubuntu12:4.3.9+dfsg-0ubuntu0.16.04.12:4.3.9+dfsg-0ubuntu0.16.04.22:4.3.9+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.12:4.3.11+dfsg-0ubuntu0.16.04.32:4.3.11+dfsg-0ubuntu0.16.04.52:4.3.11+dfsg-0ubuntu0.16.04.62:4.3.11+dfsg-0ubuntu0.16.04.72:4.3.11+dfsg-0ubuntu0.16.04.82:4.3.11+dfsg-0ubuntu0.16.04.92:4.3.11+dfsg-0ubuntu0.16.04.102:4.3.11+dfsg-0ubuntu0.16.04.112:4.3.11+dfsg-0ubuntu0.16.04.122:4.3.11+dfsg-0ubuntu0.16.04.132:4.3.11+dfsg-0ubuntu0.16.04.152:4.3.11+dfsg-0ubuntu0.16.04.162:4.3.11+dfsg-0ubuntu0.16.04.172:4.3.11+dfsg-0ubuntu0.16.04.182:4.3.11+dfsg-0ubuntu0.16.04.192:4.3.11+dfsg-0ubuntu0.16.04.202:4.3.11+dfsg-0ubuntu0.16.04.212:4.3.11+dfsg-0ubuntu0.16.04.232:4.3.11+dfsg-0ubuntu0.16.04.242:4.3.11+dfsg-0ubuntu0.16.04.252:4.3.11+dfsg-0ubuntu0.16.04.262:4.3.11+dfsg-0ubuntu0.16.04.272:4.3.11+dfsg-0ubuntu0.16.04.282:4.3.11+dfsg-0ubuntu0.16.04.292:4.3.11+dfsg-0ubuntu0.16.04.302:4.3.11+dfsg-0ubuntu0.16.04.312:4.3.11+dfsg-0ubuntu0.16.04.322:4.3.11+dfsg-0ubuntu0.16.04.342:4.3.11+dfsg-0ubuntu0.16.04.34+esm12:4.3.11+dfsg-0ubuntu0.16.04.34+esm22:4.3.11+dfsg-0ubuntu0.16.04.34+esm32:4.3.11+dfsg-0ubuntu0.16.04.34+esm4 |
None known |
ldbUbuntu:18.04:LTS |
All versions, plus listed versions 2:1.1.29-22:1.2.2-22:1.2.3-12:1.2.3-1ubuntu0.12:1.2.3-1ubuntu0.2 |
None known |
sambaUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2:4.6.7+dfsg-1ubuntu32:4.7.1+dfsg-1ubuntu12:4.7.3+dfsg-1ubuntu12:4.7.4+dfsg-1ubuntu12:4.7.6+dfsg~ubuntu-0ubuntu1 Show 27 moreShow less2:4.7.6+dfsg~ubuntu-0ubuntu22:4.7.6+dfsg~ubuntu-0ubuntu2.22:4.7.6+dfsg~ubuntu-0ubuntu2.42:4.7.6+dfsg~ubuntu-0ubuntu2.52:4.7.6+dfsg~ubuntu-0ubuntu2.62:4.7.6+dfsg~ubuntu-0ubuntu2.72:4.7.6+dfsg~ubuntu-0ubuntu2.92:4.7.6+dfsg~ubuntu-0ubuntu2.102:4.7.6+dfsg~ubuntu-0ubuntu2.112:4.7.6+dfsg~ubuntu-0ubuntu2.132:4.7.6+dfsg~ubuntu-0ubuntu2.142:4.7.6+dfsg~ubuntu-0ubuntu2.152:4.7.6+dfsg~ubuntu-0ubuntu2.162:4.7.6+dfsg~ubuntu-0ubuntu2.172:4.7.6+dfsg~ubuntu-0ubuntu2.182:4.7.6+dfsg~ubuntu-0ubuntu2.192:4.7.6+dfsg~ubuntu-0ubuntu2.202:4.7.6+dfsg~ubuntu-0ubuntu2.212:4.7.6+dfsg~ubuntu-0ubuntu2.232:4.7.6+dfsg~ubuntu-0ubuntu2.242:4.7.6+dfsg~ubuntu-0ubuntu2.262:4.7.6+dfsg~ubuntu-0ubuntu2.272:4.7.6+dfsg~ubuntu-0ubuntu2.282:4.7.6+dfsg~ubuntu-0ubuntu2.292:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm12:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm22:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3 |
None known |
ldbUbuntu:20.04:LTS |
before 2:2.4.4-0ubuntu0.20.04.2, plus listed versions 2:1.5.5-0ubuntu22:1.5.5-0ubuntu32:2.0.7-42:2.0.8-1ubuntu12:2.0.8-2 Show 6 moreShow less2:2.0.10-0ubuntu0.20.04.12:2.0.10-0ubuntu0.20.04.22:2.0.10-0ubuntu0.20.04.32:2.2.3-0ubuntu0.20.04.22:2.2.3-0ubuntu0.20.04.32:2.4.4-0ubuntu0.20.04.1 |
2:2.4.4-0ubuntu0.20.04.2 |
sambaUbuntu:20.04:LTS |
before 2:4.15.13+dfsg-0ubuntu0.20.04.2, plus listed versions 2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4 Show 23 moreShow less2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.1 |
2:4.15.13+dfsg-0ubuntu0.20.04.2 |
ldbUbuntu:22.04:LTS |
before 2:2.4.4-0ubuntu0.22.04.2, plus listed versions 2:2.2.0-3.12:2.2.3-22:2.4.2-0ubuntu12:2.4.4-0ubuntu0.12:2.4.4-0ubuntu0.22.04.1 |
2:2.4.4-0ubuntu0.22.04.2 |
sambaUbuntu:22.04:LTS |
before 2:4.15.13+dfsg-0ubuntu1.1, plus listed versions 2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1 Show 7 moreShow less2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu1 |
2:4.15.13+dfsg-0ubuntu1.1 |
sambaUbuntu:20.04:LTS From an advisory covering 2 CVEs |
before 2:4.15.13+dfsg-0ubuntu0.20.04.2, plus listed versions 2:4.10.7+dfsg-0ubuntu22:4.10.7+dfsg-0ubuntu32:4.11.1+dfsg-3ubuntu12:4.11.1+dfsg-3ubuntu22:4.11.1+dfsg-3ubuntu4 Show 23 moreShow less2:4.11.5+dfsg-1ubuntu12:4.11.5+dfsg-1ubuntu22:4.11.6+dfsg-0ubuntu12:4.11.6+dfsg-0ubuntu1.12:4.11.6+dfsg-0ubuntu1.22:4.11.6+dfsg-0ubuntu1.32:4.11.6+dfsg-0ubuntu1.42:4.11.6+dfsg-0ubuntu1.52:4.11.6+dfsg-0ubuntu1.62:4.11.6+dfsg-0ubuntu1.82:4.11.6+dfsg-0ubuntu1.92:4.11.6+dfsg-0ubuntu1.102:4.13.14+dfsg-0ubuntu0.20.04.12:4.13.14+dfsg-0ubuntu0.20.04.22:4.13.14+dfsg-0ubuntu0.20.04.32:4.13.14+dfsg-0ubuntu0.20.04.42:4.13.17~dfsg-0ubuntu0.21.04.12:4.13.17~dfsg-0ubuntu0.21.04.22:4.13.17~dfsg-0ubuntu1.20.04.12:4.13.17~dfsg-0ubuntu1.20.04.22:4.13.17~dfsg-0ubuntu1.20.04.42:4.13.17~dfsg-0ubuntu1.20.04.52:4.15.13+dfsg-0ubuntu0.20.04.1 |
2:4.15.13+dfsg-0ubuntu0.20.04.2 |
sambaUbuntu:22.04:LTS From an advisory covering 2 CVEs |
before 2:4.15.13+dfsg-0ubuntu1.1, plus listed versions 2:4.13.5+dfsg-2ubuntu22:4.13.5+dfsg-2ubuntu32:4.13.14+dfsg-0ubuntu12:4.13.14+dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu1 Show 7 moreShow less2:4.15.5~dfsg-0ubuntu22:4.15.5~dfsg-0ubuntu42:4.15.5~dfsg-0ubuntu52:4.15.5~dfsg-0ubuntu5.12:4.15.9+dfsg-0ubuntu0.22:4.15.9+dfsg-0ubuntu0.32:4.15.13+dfsg-0ubuntu1 |
2:4.15.13+dfsg-0ubuntu1.1 |
ldbopenSUSE:Tumbleweed |
before 2.7.2-1.1 | 2.7.2-1.1 |
sambaopenSUSE:Tumbleweed From an advisory covering 3 CVEs |
before 4.18.1+git.298.4ccf830b2a4-1.1 | 4.18.1+git.298.4ccf830b2a4-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-0614 is a medium vulnerability (CVSS 6.5) in Samba, published March 29, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. Fixed in samba 4.18.3-1.
References
samba.org/samba/security/CVE-2023-0614.html
security.netapp.com/advisory/ntap-20230406-0007
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S
security.gentoo.org/glsa/202309-06
nvd.nist.gov/vuln/detail/CVE-2023-0614
Show 28 moreShow less
github.com/advisories/GHSA-8pwj-3gh6-824j
security-tracker.debian.org/tracker/CVE-2023-0614
advisories.mageia.org/MGASA-2023-0127.html
bugs.mageia.org/show_bug.cgi?id=31735
lists.suse.com/pipermail/sle-security-updates/2023-March/014245.html
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1220
suse.com/support/update/announcement/2023/suse-su-20231687-1
bugzilla.suse.com/1201490
ubuntu.com/security/CVE-2023-0614
cve.org/CVERecord?id=CVE-2023-0614
Left out here: 3 versions. The JSON record has them.