Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4
CVSSv2

CVE-2019-14847

Published: 06/11/2019 Updated: 07/11/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 4.9 | Impact Score: 3.6 | Exploitability Score: 1.2
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Subscribe to Samba

Vulnerability Summary

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x prior to 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

samba samba

opensuse leap 15.0

fedoraproject fedora 29

fedoraproject fedora 30

Vendor Advisories

Ubuntu Security Notice: samba vulnerabilities
Several security issues were fixed in Samba ...
Ubuntu Security Notice: samba vulnerabilities
Several security issues were fixed in Samba ...
Arch Linux Issues:
A denial of service has been found in Samba before 41010, where users with the "get changes" extended access right can crash the AD DC LDAP server by requesting an attribute using the range= syntax By default, the supported versions of Samba impacted by this issue run using the "standard" process model, which is unaffected This is controlled by ...

References

CWE-476https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14847https://www.samba.org/samba/security/CVE-2019-14847.htmlhttp://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.htmlhttps://www.synology.com/security/advisory/Synology_SA_19_35https://lists.debian.org/debian-lts-announce/2021/05/msg00023.htmlhttps://lists.debian.org/debian-lts-announce/2023/09/msg00013.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/https://nvd.nist.govhttps://usn.ubuntu.com/4167-2/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook