Samba 4.18.0 Release Candidate 3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:samba:samba:4.18.0:rc3:*:*:*:*:*:*

part: a version: 4.18.0 update: rc3

VendorSamba (e90b9146-231c-5d4c-abab-30ee379c95a2)
ProductSamba (19c5014a-3c29-57af-83eb-c04c4b75a29f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/samba-team/samba purl2cpe 2026-06-01 10:11:05.921898
pkg:gitlab/samba-team/samba purl2cpe 2026-06-01 10:11:05.921900
pkg:samba/samba purl2cpe 2026-06-01 10:11:05.921901

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0922 vulnerable 2026-06-08 05:52:33.455842 Details available
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
Published: 2023-04-03T00:00:00.000Z
Updated: 2025-02-13T14:54:44.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0614 vulnerable 2026-06-08 05:52:32.078695 Details available
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD DC.
Published: 2023-04-03T00:00:00.000Z
Updated: 2025-02-13T14:53:13.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0225 vulnerable 2026-06-08 05:52:04.556512 Details available
A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.
Published: 2023-04-03T00:00:00.000Z
Updated: 2025-02-18T15:13:40.669Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.