CVE-2019-19344

2020-01-2100:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.004

Percentile

73.0%

JSON

There is a use-after-free issue in all samba 4.9.x versions before 4.9.18,
all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions
before 4.11.5, essentially due to a call to realloc() while other local
variables still point at the original buffer.

Bugs

<https://bugzilla.samba.org/show_bug.cgi?id=14050>

Notes

Author	Note
mdeslaur	4.9 and later only

OSVersionArchitecturePackageVersionFilename
ubuntu19.04noarchsamba< 2:4.10.0+dfsg-0ubuntu2.8UNKNOWN
ubuntu19.10noarchsamba< 2:4.10.7+dfsg-0ubuntu2.4UNKNOWN