6.5

CVE-2019-3824

A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Samba Version < 4.10.0
Canonical ≫ Ubuntu Linux Version 14.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 16.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 18.04 SwEdition lts
Canonical ≫ Ubuntu Linux Version 18.10
Debian ≫ Debian Linux Version 8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.82% 0.848
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00035.html
http://www.securityfocus.com/bid/107347
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3824
Patch
Third Party Advisory
Issue Tracking
https://bugzilla.samba.org/show_bug.cgi?id=13773
Patch
Vendor Advisory
Issue Tracking
https://lists.debian.org/debian-lts-announce/2019/03/msg00000.html
Third Party Advisory
Mailing List
https://security.netapp.com/advisory/ntap-20190226-0001/
Third Party Advisory
https://usn.ubuntu.com/3895-1/
Third Party Advisory
https://www.debian.org/security/2019/dsa-4397
Third Party Advisory