CVE-2019-14847
- State
- Published
- Severity
- 4.9 Medium
- Published
- Nov 6, 2019
- Updated
- Aug 5, 2024
- Reserved
- Aug 10, 2019
Description
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 4.9 Medium | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
sambaSamba |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14847
- https://www.samba.org/samba/security/CVE-2019-14847.html
- https://www.synology.com/security/advisory/Synology_SA_19_35
- openSUSE-SU-2019:2458vendor-advisory
- FEDORA-2019-703e299870vendor-advisory
- FEDORA-2019-460ad648e7vendor-advisory
- [debian-lts-announce] 20210529 [SECURITY] [DLA 2668-1] samba security updatemailing-list
- [debian-lts-announce] 20230914 [SECURITY] [DLA 3563-1] samba security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.