CVE-2018-10919: canonical ubuntu_linux Observable Discrepancy
Vulnerability summary
CVE-2018-10919 is a medium (CVSS 6.5) Observable Discrepancy vulnerability in canonical ubuntu_linux. EPSS estimates a 2.17% chance of exploitation in the next 30 days, higher than 82.2% of scored vulnerabilities.
Not severe (CVSS 4.3, adjacent network); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 22-08-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
CVSS metrics
6 scores · 5 sources · 2 versions- CVE.orgCNA4.3MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NDiffers
- OSV · AlpineEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- OSV · UbuntuEcosystem advisory · calculated4.3MediumCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NDiffers
- OSV · DebianEcosystem advisory · calculated6.5MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS trend
Probability
2.17%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
Decrease -0.03 pp
From 2.20% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-203Observable DiscrepancyThe product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.
- CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Affected systems
Known conditions: adjacent network, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Suse6 products
- samba&distro=SUSE Enterprise Storage 5< 4.6.16+git.124.aee309c5c18-3.32.1
- samba&distro=SUSE Linux Enterprise Desktop 12 SP3< 4.6.16+git.124.aee309c5c18-3.32.1
- samba&distro=SUSE Linux Enterprise High Availability Extension 12 SP3< 4.6.16+git.124.aee309c5c18-3.32.1
- samba&distro=SUSE Linux Enterprise Server 12 SP3< 4.6.16+git.124.aee309c5c18-3.32.1
- samba&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 4.6.16+git.124.aee309c5c18-3.32.1
Debian2 products
- samba< 2:4.8.4+dfsg-1
- debian_linuxEOL9.0
Alpine1 product
- samba≥ 4.0.0, < 4.8.4-r0 | ≥ 4.0.0, < 4.5.16-r1 | ≥ 4.0.0, < 4.6.16-r0 | ≥ 4.0.0, < 4.7.6-r1
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04
Samba1 product
- samba≥ 4.0.0, < 4.6.16 | ≥ 4.7.0, < 4.7.9 | ≥ 4.8.0, < 4.8.4
The samba team1 product
- sambaEOL4.6.16 | 4.7.9 | 4.8.4
Ubuntu1 product
- samba< 2:4.3.11+dfsg-0ubuntu0.14.04.16 | < 2:4.3.11+dfsg-0ubuntu0.16.04.15 | < 2:4.7.6+dfsg~ubuntu-0ubuntu2.2
7 vendors · 13 products
References
19 links
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10919X Refsource CONFIRMIssue TrackingThird Party Advisory