DeutschShown in its original language — a full translation is planned for a future version.
Samba: Mehrere Schwachstellen
view advisory published 2019-10-28
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Samba ausnutzen, um Dateien zu manipulieren, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service zu verursachen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-14847US | medium4.9 | — | ||
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege e… | ||||
| CVE-2019-14833US | medium5.4 | — | ||
A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a… | ||||
| CVE-2019-10218US | medium6.5 | — | ||
A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2020:2673-1 vom 2020-09-17external
- SUSE Security Update SUSE-SU-2019:2890-1 vom 2019-11-05external
- Red Hat Security Advisory RHSA-2020:0943 vom 2020-03-23external
- Red Hat Security Advisory RHSA-2020:1084 vom 2020-03-31external
- Red Hat Security Advisory RHSA-2020:1878 vom 2020-04-28external
- AVAYA Security Advisory ASA-2020-048 vom 2020-04-12external
- Debian Security Advisory DLA-2668 vom 2021-05-29external
- Debian Security Advisory DLA-3563 vom 2023-09-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan