CVE-2019-14847

Summary

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.

Affected Software

Weaknesses

• CWE-476: CWE-476

ADP Enrichment

CVE Program Container

Additional References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14847
• https://www.samba.org/samba/security/CVE-2019-14847.html
• https://www.synology.com/security/advisory/Synology_SA_19_35
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/
• https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html
• https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14847
• https://www.samba.org/samba/security/CVE-2019-14847.html
• https://www.synology.com/security/advisory/Synology_SA_19_35
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/
• https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html
• https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html

• ←Previous
• Next→