GCVE-110-MAGEIA-2026-142

Advisory Published

Vulnetix · Advisory published May 16, 2026

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store. (CVE-2018-14628) Command injection in wins server hook script. (CVE-2025-10230) vfs_streams_xattr uninitialized memory write possible. (CVE-2025-9640)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	samba	0 (affected), 4.17.12-1.2.mga9 (unaffected)	—

References

Updated samba packages fix security vulnerabilities

advisory

Updated samba packages fix security vulnerabilities

issue

Updated samba packages fix security vulnerabilities

url

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON