6.5Mittel

CVE-2019-10197

SAMBA samba Veröffentlicht: 2019-09-03 17:50 (vor 7 Jahren)

Beschreibung

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.

Schwachstellentyp (CWE): CWE-22

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
SAMBA	samba	samba 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8, samba 4.11.x up to 4.11.0rc3

Referenzen und Patches

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10197
https://www.samba.org/samba/security/CVE-2019-10197.html
https://security.netapp.com/advisory/ntap-20190903-0001/
USN-4121-1 vendor-advisory
20190904 [SECURITY] [DSA 4513-1] samba security update mailing-list
DSA-4513 vendor-advisory
openSUSE-SU-2019:2142 vendor-advisory
FEDORA-2019-e3e521e5b3 vendor-advisory
FEDORA-2019-eb1e982800 vendor-advisory
FEDORA-2019-41c7fa478a vendor-advisory
https://support.f5.com/csp/article/K69511801
https://support.f5.com/csp/article/K69511801?utm_source=f5support&amp%3Butm_medium=RSS
RHSA-2019:3253 vendor-advisory
RHSA-2019:4023 vendor-advisory
GLSA-202003-52 vendor-advisory

CVSS-Score

6.5Mittel

Quelle: redhat · CVSS 3.0

Angriffsvektor: Netzwerk
Komplexität: Niedrig
Rechte erforderlich: Keine
Benutzerinteraktion: Keine
Geltungsbereich: Unverändert
Vertraulichkeit: Niedrig
Integrität: Niedrig
Verfügbarkeit: Keine

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

3.18%

höher als 88 % aller CVEs

Zeitverlauf

ID reserviert2019-03-27
Veröffentlicht2019-09-03 17:50
Bei IP-DB eingegangen2026-10-24 23:51
Zuletzt aktualisiert2024-08-05 01:17

Vergeben von (CNA): redhat

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Samba

8.1Hoch

CVE-2026-109411 vor 10 Tagen

Samba: access control bypass via vfs_ceph_rgw case-insensitive open

Samba Samba; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfs_ceph_rgw module. When …

6.5Mittel

CVE-2026-58224 vor 2 Monaten

Samba: ctdb fails to do integrity checking of received packets

Red Hat Red Hat Ceph Storage 9.2; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7

A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packe…

9.0Kritisch

CVE-2026-4408 vor 5 Monaten

Samba: remote code execution in samr

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controll…

2.5%EPSS

7.1Hoch

CVE-2026-1933 vor 5 Monaten

Samba: missing access check on reparse point operations

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete reparse point metadata t…

6.5Mittel

CVE-2026-2340 vor 5 Monaten

Samba: vfs_worm does not block directory modification

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenti…

8.0Hoch

CVE-2026-3012 vor 5 Monaten

Samba: group policy certificate enrollment uses http:// without validation

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verifi…