Summary
Demi Marie Obenour discovered that the Samba LDAP server incorrectly
handled certain confidential attribute values. A remote authenticated
attacker could possibly use this issue to obtain certain sensitive
information. (CVE-2023-0614)
Andrew Bartlett discovered that the Samba AD DC admin tool incorrectly
sent passwords in cleartext. A remote attacker could possibly use this
issue to obtain sensitive information. (CVE-2023-0922)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | samba | 2:4.15.13+dfsg-0ubuntu0.20.04.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | samba | 2:4.15.13+dfsg-0ubuntu1.1 |
Vulnerabilities 2
-
High 7.7
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insu…
-
Medium 5.9
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset pas…