Lucene search

K

RedhatCVELIST:CVE-2023-0614

HistoryApr 03, 2023 - 12:00 a.m.

CVE-2023-0614

2023-04-0300:00:00

CWE-200

redhat

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Samba",
    "versions": [
      {
        "version": "samba 4.18.1, samba 4.17.7, samba 4.16.10",
        "status": "affected"
      }
    ]
  }
]

References

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/

security.gentoo.org/glsa/202309-06

security.netapp.com/advisory/ntap-20230406-0007/

www.samba.org/samba/security/CVE-2023-0614.html

6.8 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.7%

Related for CVELIST:CVE-2023-0614

openvas31 osv6 nessus31 nvd2 samba2 ubuntucve2 debiancve2 cve2 prion2 alpinelinux2 altlinux4 freebsd2 cvelist1 redhatcve2 suse2 photon3 veracode1 ubuntu3 debian2 mageia2 slackware1 fedora11 cloudfoundry1 ibm2 cisa1 gentoo2