PT-2023-10677 · Samba+4 · Samba+4

Published 2018-08-31 · Updated 2026-01-29 · CVE-2018-14628

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description An information leak issue was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

ALT-PU-2023-7788

ALT-PU-2023-7794

ALT-PU-2024-12484

ALT-PU-2024-1311

AZL-13064

AZL-36987

BDU:2025-03903

CVE-2018-14628

ECHO-B63D-A3C9-BA66

OPENSUSE-SU-2024:13579-1

Affected Products

Alt Linux

Astra Linux

Debian

Red Os

Samba

References · 34

• 🔥 https://bugzilla.samba.org/show_bug.cgi?id=13595 · Exploit
• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=1625445 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:13579-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-14628 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-14628 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-36987 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-14628 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-14628 · Security Note
• https://bdu.fstec.ru/vul/2025-03903 · Security Note
• https://osv.dev/vulnerability/AZL-13064 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2018-14628 · Vendor Advisory
• http://repo.red-soft.ru/redos/8.0/x86_64/updates · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-14628 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW · Patch