Summary
Demi Marie Obenour discovered that ldb, when used with Samba, incorrectly
handled certain confidential attribute values. A remote authenticated
attacker could possibly use this issue to obtain certain sensitive
information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | ldb | 2:2.4.4-0ubuntu0.20.04.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | ldb | 2:2.4.4-0ubuntu0.22.04.2 |
Vulnerabilities 1
-
High 7.7
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insu…
References
-
report
https://ubuntu.com/security/CVE-2023-0614