CVE-2018-14628: fallo en Samba
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 1.2%
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
Productos afectados
n/a · SambaReferencias
https://bugzilla.redhat.com/show_bug.cgi?id=1625445https://bugzilla.samba.org/show_bug.cgi?id=13595https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/https://security.netapp.com/advisory/ntap-20230223-0008/http://www.openwall.com/lists/oss-security/2023/11/28/4