Lucene search

K
ubuntuUbuntuUSN-5992-1
HistoryApr 03, 2023 - 12:00 a.m.

ldb vulnerability

2023-04-0300:00:00
ubuntu.com
47
ubuntu
security
sensitive information
samba
authentication
attribute values
database

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

46.5%

Releases

  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • ldb - LDAP-like embedded database

Details

Demi Marie Obenour discovered that ldb, when used with Samba, incorrectly
handled certain confidential attribute values. A remote authenticated
attacker could possibly use this issue to obtain certain sensitive
information.

OSVersionArchitecturePackageVersionFilename
Ubuntu22.04noarchlibldb2< 2:2.4.4-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchldb-tools< 2:2.4.4-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchldb-tools-dbgsym< 2:2.4.4-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchlibldb-dev< 2:2.4.4-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchlibldb2-dbgsym< 2:2.4.4-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchpython3-ldb< 2:2.4.4-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchpython3-ldb-dbgsym< 2:2.4.4-0ubuntu0.22.04.2UNKNOWN
Ubuntu22.04noarchpython3-ldb-dev< 2:2.4.4-0ubuntu0.22.04.2UNKNOWN
Ubuntu20.04noarchlibldb2< 2:2.4.4-0ubuntu0.20.04.2UNKNOWN
Ubuntu20.04noarchldb-tools< 2:2.4.4-0ubuntu0.20.04.2UNKNOWN
Rows per page:
1-10 of 161

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

46.5%