Information Leak Vulnerability in Samba Package: CVE-2018-14628
Summary
ALPINE-CVE-2018-14628: An information leak vulnerability was discovered in Samba's LDAP server. Affects samba versions < 4.18.9-r0. Fixed in 4.18.9-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Samba is an open-source software suite that provides seamless file and print services to SMB/CIFS clients. It allows for interoperability between Linux/Unix servers and Windows-based clients. Samba is widely used in enterprise environments for file sharing and printer services. The vulnerability in question arises from inadequate access control checks in its LDAP server, which can lead to unauthorized information disclosure.
Vulnerability Detail
An information leak vulnerability was discovered in Samba's LDAP server. This issue stems from missing access control checks that allow an authenticated but unprivileged attacker to discover the names and preserved attributes of deleted objects in the LDAP store. The potential ramifications include unauthorized access to sensitive information, which could be exploited for further attacks or data breaches.
How To Fix
Minimum fixed version
4.18.9-r0
This is the first release that contains the fix.
sudo apk add --upgrade sambaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the LDAP server by implementing stricter access control measures until the package is updated. This may involve configuring firewall rules or modifying Samba's configuration files to limit access to trusted users only.
Conclusion
The information leak vulnerability CVE-2018-14628 in the Samba package poses a significant risk due to inadequate access control in its LDAP server. It is crucial to update to the patched version 4.18.9-r0 to secure your systems. Additionally, utilizing tools like Vulert can help monitor and manage vulnerabilities effectively.
See every vulnerability recorded for samba →
FAQ
CVE-2018-14628 is a vulnerability in the Samba package that allows authenticated users to access deleted object information due to missing access control checks.
The vulnerability can lead to unauthorized information disclosure, allowing attackers to access sensitive data that should be restricted.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Check your application against this vulnerability using the Vulert playground at Vulert Scanner.
Yes, the patched version of Samba is 4.18.9-r0. It is recommended to update to this version to mitigate the vulnerability.
If immediate updating is not possible, implement stricter access controls on your LDAP server as a temporary workaround to limit exposure.
References
Related vulnerabilities
Recent vulnerabilities recorded for samba.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
