{"id":"CVE-2018-14628","aliases":["ALPINE-CVE-2018-14628","AZL-13064","AZL-36987","DEBIAN-CVE-2018-14628","EUVD-2018-6534","GHSA-88v2-p2r7-rvpx","MGASA-2026-0142","UBUNTU-CVE-2018-14628","openSUSE-SU-2024:13579-1"],"status":"published","title":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access...","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01202,"percentile":0.68448,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-862"],"published":"2023-01-17T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"samba","fixed_in":["4.18.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"samba","fixed_in":["4.18.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"samba","fixed_in":["4.18.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"samba","fixed_in":["4.18.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"samba","fixed_in":["4.18.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"samba","fixed_in":["4.18.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"samba","fixed_in":["4.18.9-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.17.12+dfsg-0+deb12u3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.19.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.19.3+dfsg-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"samba","fixed_in":["2:4.19.4+dfsg-3ubuntu1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"samba","fixed_in":["4.19.4+git.339.acf1ccaa020-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.18.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.18.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.18.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.18.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.18.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.18.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.18.9-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.12.5-7"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.18.3-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.17.12+dfsg-0+deb12u3"}]}],"versions":["2:4.17.10+dfsg-0+deb12u1","2:4.17.10+dfsg-0+deb12u1~bpo11+1","2:4.17.11+dfsg-0+deb12u1","2:4.17.12+dfsg-0+deb12u1","2:4.17.12+dfsg-0+deb12u1~bpo11+1","2:4.17.12+dfsg-0+deb12u2","2:4.17.8+dfsg-2","2:4.17.8+dfsg-2.1","2:4.17.9+dfsg-0+deb12u1","2:4.17.9+dfsg-0+deb12u2","2:4.17.9+dfsg-0+deb12u3","2:4.17.9+dfsg-0+deb12u3~bpo11+1"]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.19.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.19.3+dfsg-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.12-1.2.mga9"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:3.6.18-1ubuntu3","2:4.0.10+dfsg-4ubuntu2","2:4.0.13+dfsg-1ubuntu1","2:4.1.3+dfsg-2ubuntu2","2:4.1.3+dfsg-2ubuntu3","2:4.1.3+dfsg-2ubuntu4","2:4.1.3+dfsg-2ubuntu5","2:4.1.6+dfsg-1ubuntu1","2:4.1.6+dfsg-1ubuntu2","2:4.1.6+dfsg-1ubuntu2.14.04.1","2:4.1.6+dfsg-1ubuntu2.14.04.2","2:4.1.6+dfsg-1ubuntu2.14.04.3","2:4.1.6+dfsg-1ubuntu2.14.04.4","2:4.1.6+dfsg-1ubuntu2.14.04.5","2:4.1.6+dfsg-1ubuntu2.14.04.7","2:4.1.6+dfsg-1ubuntu2.14.04.8","2:4.1.6+dfsg-1ubuntu2.14.04.9","2:4.1.6+dfsg-1ubuntu2.14.04.11","2:4.1.6+dfsg-1ubuntu2.14.04.12","2:4.1.6+dfsg-1ubuntu2.14.04.13","2:4.3.8+dfsg-0ubuntu0.14.04.2","2:4.3.9+dfsg-0ubuntu0.14.04.1","2:4.3.9+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.1","2:4.3.11+dfsg-0ubuntu0.14.04.2","2:4.3.11+dfsg-0ubuntu0.14.04.3","2:4.3.11+dfsg-0ubuntu0.14.04.4","2:4.3.11+dfsg-0ubuntu0.14.04.6","2:4.3.11+dfsg-0ubuntu0.14.04.7","2:4.3.11+dfsg-0ubuntu0.14.04.8","2:4.3.11+dfsg-0ubuntu0.14.04.9","2:4.3.11+dfsg-0ubuntu0.14.04.10","2:4.3.11+dfsg-0ubuntu0.14.04.11","2:4.3.11+dfsg-0ubuntu0.14.04.12","2:4.3.11+dfsg-0ubuntu0.14.04.13","2:4.3.11+dfsg-0ubuntu0.14.04.14","2:4.3.11+dfsg-0ubuntu0.14.04.16","2:4.3.11+dfsg-0ubuntu0.14.04.17","2:4.3.11+dfsg-0ubuntu0.14.04.19","2:4.3.11+dfsg-0ubuntu0.14.04.20","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14","2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.1.17+dfsg-4ubuntu2","2:4.1.20+dfsg-1ubuntu1","2:4.1.20+dfsg-1ubuntu2","2:4.1.20+dfsg-1ubuntu3","2:4.1.20+dfsg-1ubuntu5","2:4.3.3+dfsg-1ubuntu1","2:4.3.3+dfsg-1ubuntu2","2:4.3.3+dfsg-1ubuntu3","2:4.3.6+dfsg-1ubuntu1","2:4.3.8+dfsg-0ubuntu1","2:4.3.9+dfsg-0ubuntu0.16.04.1","2:4.3.9+dfsg-0ubuntu0.16.04.2","2:4.3.9+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.1","2:4.3.11+dfsg-0ubuntu0.16.04.3","2:4.3.11+dfsg-0ubuntu0.16.04.5","2:4.3.11+dfsg-0ubuntu0.16.04.6","2:4.3.11+dfsg-0ubuntu0.16.04.7","2:4.3.11+dfsg-0ubuntu0.16.04.8","2:4.3.11+dfsg-0ubuntu0.16.04.9","2:4.3.11+dfsg-0ubuntu0.16.04.10","2:4.3.11+dfsg-0ubuntu0.16.04.11","2:4.3.11+dfsg-0ubuntu0.16.04.12","2:4.3.11+dfsg-0ubuntu0.16.04.13","2:4.3.11+dfsg-0ubuntu0.16.04.15","2:4.3.11+dfsg-0ubuntu0.16.04.16","2:4.3.11+dfsg-0ubuntu0.16.04.17","2:4.3.11+dfsg-0ubuntu0.16.04.18","2:4.3.11+dfsg-0ubuntu0.16.04.19","2:4.3.11+dfsg-0ubuntu0.16.04.20","2:4.3.11+dfsg-0ubuntu0.16.04.21","2:4.3.11+dfsg-0ubuntu0.16.04.23","2:4.3.11+dfsg-0ubuntu0.16.04.24","2:4.3.11+dfsg-0ubuntu0.16.04.25","2:4.3.11+dfsg-0ubuntu0.16.04.26","2:4.3.11+dfsg-0ubuntu0.16.04.27","2:4.3.11+dfsg-0ubuntu0.16.04.28","2:4.3.11+dfsg-0ubuntu0.16.04.29","2:4.3.11+dfsg-0ubuntu0.16.04.30","2:4.3.11+dfsg-0ubuntu0.16.04.31","2:4.3.11+dfsg-0ubuntu0.16.04.32","2:4.3.11+dfsg-0ubuntu0.16.04.34","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm1","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm2","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm3","2:4.3.11+dfsg-0ubuntu0.16.04.34+esm4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.6.7+dfsg-1ubuntu3","2:4.7.1+dfsg-1ubuntu1","2:4.7.3+dfsg-1ubuntu1","2:4.7.4+dfsg-1ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu1","2:4.7.6+dfsg~ubuntu-0ubuntu2","2:4.7.6+dfsg~ubuntu-0ubuntu2.2","2:4.7.6+dfsg~ubuntu-0ubuntu2.4","2:4.7.6+dfsg~ubuntu-0ubuntu2.5","2:4.7.6+dfsg~ubuntu-0ubuntu2.6","2:4.7.6+dfsg~ubuntu-0ubuntu2.7","2:4.7.6+dfsg~ubuntu-0ubuntu2.9","2:4.7.6+dfsg~ubuntu-0ubuntu2.10","2:4.7.6+dfsg~ubuntu-0ubuntu2.11","2:4.7.6+dfsg~ubuntu-0ubuntu2.13","2:4.7.6+dfsg~ubuntu-0ubuntu2.14","2:4.7.6+dfsg~ubuntu-0ubuntu2.15","2:4.7.6+dfsg~ubuntu-0ubuntu2.16","2:4.7.6+dfsg~ubuntu-0ubuntu2.17","2:4.7.6+dfsg~ubuntu-0ubuntu2.18","2:4.7.6+dfsg~ubuntu-0ubuntu2.19","2:4.7.6+dfsg~ubuntu-0ubuntu2.20","2:4.7.6+dfsg~ubuntu-0ubuntu2.21","2:4.7.6+dfsg~ubuntu-0ubuntu2.23","2:4.7.6+dfsg~ubuntu-0ubuntu2.24","2:4.7.6+dfsg~ubuntu-0ubuntu2.26","2:4.7.6+dfsg~ubuntu-0ubuntu2.27","2:4.7.6+dfsg~ubuntu-0ubuntu2.28","2:4.7.6+dfsg~ubuntu-0ubuntu2.29","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm1","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm2","2:4.7.6+dfsg~ubuntu-0ubuntu2.29+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.10.7+dfsg-0ubuntu2","2:4.10.7+dfsg-0ubuntu3","2:4.11.1+dfsg-3ubuntu1","2:4.11.1+dfsg-3ubuntu2","2:4.11.1+dfsg-3ubuntu4","2:4.11.5+dfsg-1ubuntu1","2:4.11.5+dfsg-1ubuntu2","2:4.11.6+dfsg-0ubuntu1","2:4.11.6+dfsg-0ubuntu1.1","2:4.11.6+dfsg-0ubuntu1.2","2:4.11.6+dfsg-0ubuntu1.3","2:4.11.6+dfsg-0ubuntu1.4","2:4.11.6+dfsg-0ubuntu1.5","2:4.11.6+dfsg-0ubuntu1.6","2:4.11.6+dfsg-0ubuntu1.8","2:4.11.6+dfsg-0ubuntu1.9","2:4.11.6+dfsg-0ubuntu1.10","2:4.13.14+dfsg-0ubuntu0.20.04.1","2:4.13.14+dfsg-0ubuntu0.20.04.2","2:4.13.14+dfsg-0ubuntu0.20.04.3","2:4.13.14+dfsg-0ubuntu0.20.04.4","2:4.13.17~dfsg-0ubuntu0.21.04.1","2:4.13.17~dfsg-0ubuntu0.21.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.1","2:4.13.17~dfsg-0ubuntu1.20.04.2","2:4.13.17~dfsg-0ubuntu1.20.04.4","2:4.13.17~dfsg-0ubuntu1.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.1","2:4.15.13+dfsg-0ubuntu0.20.04.2","2:4.15.13+dfsg-0ubuntu0.20.04.3","2:4.15.13+dfsg-0ubuntu0.20.04.4","2:4.15.13+dfsg-0ubuntu0.20.04.5","2:4.15.13+dfsg-0ubuntu0.20.04.6","2:4.15.13+dfsg-0ubuntu0.20.04.7","2:4.15.13+dfsg-0ubuntu0.20.04.8","2:4.15.13+dfsg-0ubuntu0.20.04.8+esm1","2:4.15.13+dfsg-0ubuntu0.20.04.8+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.13.5+dfsg-2ubuntu2","2:4.13.5+dfsg-2ubuntu3","2:4.13.14+dfsg-0ubuntu1","2:4.13.14+dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu1","2:4.15.5~dfsg-0ubuntu2","2:4.15.5~dfsg-0ubuntu4","2:4.15.5~dfsg-0ubuntu5","2:4.15.5~dfsg-0ubuntu5.1","2:4.15.9+dfsg-0ubuntu0.2","2:4.15.9+dfsg-0ubuntu0.3","2:4.15.13+dfsg-0ubuntu1","2:4.15.13+dfsg-0ubuntu1.1","2:4.15.13+dfsg-0ubuntu1.2","2:4.15.13+dfsg-0ubuntu1.3","2:4.15.13+dfsg-0ubuntu1.4","2:4.15.13+dfsg-0ubuntu1.5","2:4.15.13+dfsg-0ubuntu1.6","2:4.15.13+dfsg-0ubuntu1.7","2:4.15.13+dfsg-0ubuntu1.8","2:4.15.13+dfsg-0ubuntu1.9","2:4.15.13+dfsg-0ubuntu1.10","2:4.15.13+dfsg-0ubuntu1.12","2:4.15.13+dfsg-0ubuntu1.13"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.19.4+dfsg-3ubuntu1"}]}],"versions":["2:4.18.6+dfsg-1ubuntu2","2:4.18.6+dfsg-1ubuntu2.1","2:4.18.6+dfsg-1ubuntu2.2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.4+git.339.acf1ccaa020-1.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://bugzilla.samba.org/show_bug.cgi?id=13595","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1625445","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2023/11/28/4","tags":["x_transferred","Mailing List","article"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.netapp.com/advisory/ntap-20230223-0008/","tags":["Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14628","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62"},{"url":"https://security.netapp.com/advisory/ntap-20230223-0008"},{"url":"https://github.com/advisories/GHSA-88v2-p2r7-rvpx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-14628","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-14628","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0142.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34672","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2025/10/15/2","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-14628","tags":["report"]},{"url":"https://marc.info/?l=oss-security\u0026m=170118854915655","tags":["report"]},{"url":"https://www.samba.org/samba/security/CVE-2018-14628.html","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14628","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14628","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-14628","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T00:00:00Z","modified":"2025-02-13T16:27:16.302Z","cwes":["CWE-862"],"updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2018-6534","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T00:00:00Z","modified":"2025-02-13T16:27:16Z","cvss":[{"version":"","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"none"}],"updated_at":"2026-11-03T00:03:53.290549Z"}],"ghsa":[{"id":"GHSA-88v2-p2r7-rvpx","title":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access...","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T18:30:43Z","modified":"2025-01-22T18:32:55Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:59:38.594977Z"}],"nvd":[{"id":"CVE-2018-14628","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T18:15:10.81Z","modified":"2026-06-17T01:41:19.49Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:05:00.565712Z"}],"osv":[{"id":"ALPINE-CVE-2018-14628","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T18:15:10.81Z","modified":"2026-10-23T17:17:55.216564497Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"AZL-13064","title":"CVE-2018-14628 affecting package samba 4.12.5-7","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T18:15:10Z","modified":"2026-04-21T04:22:36.916188Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:02.666535Z"},{"id":"AZL-36987","title":"CVE-2018-14628 affecting package samba 4.18.3-2","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T18:15:10Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-05T16:41:19.554273Z"},{"id":"CVE-2018-14628","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T18:15:10.81Z","modified":"2026-10-24T10:30:39.288455764Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:08.242347Z"},{"id":"DEBIAN-CVE-2018-14628","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T18:15:10.81Z","modified":"2026-10-23T18:03:47.624759743Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:30.290351Z"},{"id":"UBUNTU-CVE-2018-14628","description":"An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.","status":"published","published":"2023-01-17T18:15:00Z","modified":"2026-07-28T16:07:05.689697098Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:17.014176Z"},{"id":"MGASA-2026-0142","title":"Updated samba packages fix security vulnerabilities","description":"An information leak vulnerability was discovered in Samba's LDAP server.\nDue to missing access control checks, an authenticated but unprivileged\nattacker could discover the names and preserved attributes of deleted\nobjects in the LDAP store. (CVE-2018-14628)\nCommand injection in wins server hook script. (CVE-2025-10230)\nvfs_streams_xattr uninitialized memory write possible. (CVE-2025-9640)\n","status":"published","published":"2026-05-16T00:52:55Z","modified":"2026-05-16T01:00:06.741183Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2024:13579-1","title":"ctdb-4.19.4+git.339.acf1ccaa020-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.19.4+git.339.acf1ccaa020-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:04:26.584993Z","updated_at":"2026-11-02T16:58:36.327643Z"}]}}