Vulnerability-Lookup

UBUNTU-CVE-2019-14907 (CVE-2019-14907)

Vulnerability from osv_ubuntu – Published: 2020-01-21 00:00 – Updated: 2026-04-22 07:39 – Source website

Details

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).

Severity

6.5 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6.5 (Medium)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2019-14907	REPORT
	https://ubuntu.com/security/notices/USN-4244-1	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2019-14907	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "libpam-smbpass",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "libsmbsharemodes0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "python-samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "registry-tools",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "samba-common",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "samba-libs",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "smbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          },
          {
            "binary_name": "winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "samba",
        "purl": "pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:3.6.18-1ubuntu3",
        "2:4.0.10+dfsg-4ubuntu2",
        "2:4.0.13+dfsg-1ubuntu1",
        "2:4.1.3+dfsg-2ubuntu2",
        "2:4.1.3+dfsg-2ubuntu3",
        "2:4.1.3+dfsg-2ubuntu4",
        "2:4.1.3+dfsg-2ubuntu5",
        "2:4.1.6+dfsg-1ubuntu1",
        "2:4.1.6+dfsg-1ubuntu2",
        "2:4.1.6+dfsg-1ubuntu2.14.04.1",
        "2:4.1.6+dfsg-1ubuntu2.14.04.2",
        "2:4.1.6+dfsg-1ubuntu2.14.04.3",
        "2:4.1.6+dfsg-1ubuntu2.14.04.4",
        "2:4.1.6+dfsg-1ubuntu2.14.04.5",
        "2:4.1.6+dfsg-1ubuntu2.14.04.7",
        "2:4.1.6+dfsg-1ubuntu2.14.04.8",
        "2:4.1.6+dfsg-1ubuntu2.14.04.9",
        "2:4.1.6+dfsg-1ubuntu2.14.04.11",
        "2:4.1.6+dfsg-1ubuntu2.14.04.12",
        "2:4.1.6+dfsg-1ubuntu2.14.04.13",
        "2:4.3.8+dfsg-0ubuntu0.14.04.2",
        "2:4.3.9+dfsg-0ubuntu0.14.04.1",
        "2:4.3.9+dfsg-0ubuntu0.14.04.3",
        "2:4.3.11+dfsg-0ubuntu0.14.04.1",
        "2:4.3.11+dfsg-0ubuntu0.14.04.2",
        "2:4.3.11+dfsg-0ubuntu0.14.04.3",
        "2:4.3.11+dfsg-0ubuntu0.14.04.4",
        "2:4.3.11+dfsg-0ubuntu0.14.04.6",
        "2:4.3.11+dfsg-0ubuntu0.14.04.7",
        "2:4.3.11+dfsg-0ubuntu0.14.04.8",
        "2:4.3.11+dfsg-0ubuntu0.14.04.9",
        "2:4.3.11+dfsg-0ubuntu0.14.04.10",
        "2:4.3.11+dfsg-0ubuntu0.14.04.11",
        "2:4.3.11+dfsg-0ubuntu0.14.04.12",
        "2:4.3.11+dfsg-0ubuntu0.14.04.13",
        "2:4.3.11+dfsg-0ubuntu0.14.04.14",
        "2:4.3.11+dfsg-0ubuntu0.14.04.16",
        "2:4.3.11+dfsg-0ubuntu0.14.04.17",
        "2:4.3.11+dfsg-0ubuntu0.14.04.19",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm7",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm11",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm12",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm13",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm14",
        "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm15"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ctdb",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "python-samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "registry-tools",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-common",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-libs",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "smbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "samba",
        "purl": "pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.16.04.25?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:4.1.17+dfsg-4ubuntu2",
        "2:4.1.20+dfsg-1ubuntu1",
        "2:4.1.20+dfsg-1ubuntu2",
        "2:4.1.20+dfsg-1ubuntu3",
        "2:4.1.20+dfsg-1ubuntu5",
        "2:4.3.3+dfsg-1ubuntu1",
        "2:4.3.3+dfsg-1ubuntu2",
        "2:4.3.3+dfsg-1ubuntu3",
        "2:4.3.6+dfsg-1ubuntu1",
        "2:4.3.8+dfsg-0ubuntu1",
        "2:4.3.9+dfsg-0ubuntu0.16.04.1",
        "2:4.3.9+dfsg-0ubuntu0.16.04.2",
        "2:4.3.9+dfsg-0ubuntu0.16.04.3",
        "2:4.3.11+dfsg-0ubuntu0.16.04.1",
        "2:4.3.11+dfsg-0ubuntu0.16.04.3",
        "2:4.3.11+dfsg-0ubuntu0.16.04.5",
        "2:4.3.11+dfsg-0ubuntu0.16.04.6",
        "2:4.3.11+dfsg-0ubuntu0.16.04.7",
        "2:4.3.11+dfsg-0ubuntu0.16.04.8",
        "2:4.3.11+dfsg-0ubuntu0.16.04.9",
        "2:4.3.11+dfsg-0ubuntu0.16.04.10",
        "2:4.3.11+dfsg-0ubuntu0.16.04.11",
        "2:4.3.11+dfsg-0ubuntu0.16.04.12",
        "2:4.3.11+dfsg-0ubuntu0.16.04.13",
        "2:4.3.11+dfsg-0ubuntu0.16.04.15",
        "2:4.3.11+dfsg-0ubuntu0.16.04.16",
        "2:4.3.11+dfsg-0ubuntu0.16.04.17",
        "2:4.3.11+dfsg-0ubuntu0.16.04.18",
        "2:4.3.11+dfsg-0ubuntu0.16.04.19",
        "2:4.3.11+dfsg-0ubuntu0.16.04.20",
        "2:4.3.11+dfsg-0ubuntu0.16.04.21",
        "2:4.3.11+dfsg-0ubuntu0.16.04.23",
        "2:4.3.11+dfsg-0ubuntu0.16.04.24"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ctdb",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "python-samba",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "registry-tools",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-common",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-libs",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "smbclient",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "samba",
        "purl": "pkg:deb/ubuntu/samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:4.6.7+dfsg-1ubuntu3",
        "2:4.7.1+dfsg-1ubuntu1",
        "2:4.7.3+dfsg-1ubuntu1",
        "2:4.7.4+dfsg-1ubuntu1",
        "2:4.7.6+dfsg~ubuntu-0ubuntu1",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.2",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.4",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.5",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.6",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.7",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.9",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.10",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.13",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.14"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ctdb",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "python3-samba",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "registry-tools",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "samba",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "samba-common",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "samba-libs",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "smbclient",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          },
          {
            "binary_name": "winbind",
            "binary_version": "2:4.11.5+dfsg-1ubuntu1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "samba",
        "purl": "pkg:deb/ubuntu/samba@2:4.11.5+dfsg-1ubuntu1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:4.11.5+dfsg-1ubuntu1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:4.10.7+dfsg-0ubuntu2",
        "2:4.10.7+dfsg-0ubuntu3",
        "2:4.11.1+dfsg-3ubuntu1",
        "2:4.11.1+dfsg-3ubuntu2",
        "2:4.11.1+dfsg-3ubuntu4"
      ]
    }
  ],
  "aliases": [],
  "details": "All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with \"log level = 3\" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).",
  "id": "UBUNTU-CVE-2019-14907",
  "modified": "2026-04-22T07:39:03Z",
  "published": "2020-01-21T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-14907"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4244-1"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2019-14907"
    }
  ],
  "related": [
    "USN-4244-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2019-14907"
  ]
}

CVE-2019-14907 (GCVE-0-2019-14907)

Vulnerability from cvelistv5 – Published: 2020-01-21 00:00 – Updated: 2024-08-05 00:34

Summary

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-125

Assigner

redhat CNA under the redhat root

CNA scorecard B 82/100 over 1086 records in the last 180 days details

References

11 references

URL	Tags
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2…
https://www.samba.org/samba/security/CVE-2019-149…
https://security.netapp.com/advisory/ntap-2020012…
https://www.synology.com/security/advisory/Synolo…
https://usn.ubuntu.com/4244-1/	vendor-advisory
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://lists.fedoraproject.org/archives/list/pac…	vendor-advisory
https://security.gentoo.org/glsa/202003-52	vendor-advisory
https://lists.debian.org/debian-lts-announce/2021…	mailing-list
https://lists.debian.org/debian-lts-announce/2023…	mailing-list

Impacted products

1 product

Vendor	Product	Version
Red Hat	samba	Affected: All versions 4.11.x before 4.11.5 Affected: All versions 4.10.x before 4.10.12 Affected: All versions 4.9.x before 4.9.18

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T00:34:52.321Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14907"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.samba.org/samba/security/CVE-2019-14907.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20200122-0001/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.synology.com/security/advisory/Synology_SA_20_01"
          },
          {
            "name": "USN-4244-1",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/4244-1/"
          },
          {
            "name": "openSUSE-SU-2020:0122",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html"
          },
          {
            "name": "FEDORA-2020-6bd386c7eb",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/"
          },
          {
            "name": "FEDORA-2020-f92cd0e72b",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/"
          },
          {
            "name": "GLSA-202003-52",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202003-52"
          },
          {
            "name": "[debian-lts-announce] 20210529 [SECURITY] [DLA 2668-1] samba security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html"
          },
          {
            "name": "[debian-lts-announce] 20230914 [SECURITY] [DLA 3563-1] samba security update",
            "tags": [
              "mailing-list",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "samba",
          "vendor": "Red Hat",
          "versions": [
            {
              "status": "affected",
              "version": "All versions 4.11.x before 4.11.5"
            },
            {
              "status": "affected",
              "version": "All versions 4.10.x before 4.10.12"
            },
            {
              "status": "affected",
              "version": "All versions 4.9.x before 4.9.18"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with \"log level = 3\" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-09-14T16:06:16.214Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14907"
        },
        {
          "url": "https://www.samba.org/samba/security/CVE-2019-14907.html"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20200122-0001/"
        },
        {
          "url": "https://www.synology.com/security/advisory/Synology_SA_20_01"
        },
        {
          "name": "USN-4244-1",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://usn.ubuntu.com/4244-1/"
        },
        {
          "name": "openSUSE-SU-2020:0122",
          "tags": [
            "vendor-advisory"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html"
        },
        {
          "name": "FEDORA-2020-6bd386c7eb",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/"
        },
        {
          "name": "FEDORA-2020-f92cd0e72b",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/"
        },
        {
          "name": "GLSA-202003-52",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202003-52"
        },
        {
          "name": "[debian-lts-announce] 20210529 [SECURITY] [DLA 2668-1] samba security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html"
        },
        {
          "name": "[debian-lts-announce] 20230914 [SECURITY] [DLA 3563-1] samba security update",
          "tags": [
            "mailing-list"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2019-14907",
    "datePublished": "2020-01-21T00:00:00.000Z",
    "dateReserved": "2019-08-10T00:00:00.000Z",
    "dateUpdated": "2024-08-05T00:34:52.321Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

USN-4244-1 (UBUNTU-CVE-2019-14902)

Vulnerability from osv_ubuntu – Published: 2020-01-21 12:59 – Updated: 2026-04-27 14:11 – Source website

Summary

samba vulnerabilities

Details

It was discovered that Samba did not automatically replicate ACLs set to inherit down a subtree on AD Directory, contrary to expectations. This issue was only addressed in Ubuntu 18.04 LTS, Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-14902)

Robert Święcki discovered that Samba incorrectly handled certain character conversions when the log level is set to 3 or above. In certain environments, a remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2019-14907)

Christian Naumer discovered that Samba incorrectly handled DNS zone scavenging. This issue could possibly result in some incorrect data being written to the DB. This issue only applied to Ubuntu 19.04 and Ubuntu 19.10. (CVE-2019-19344)

References

URL

Type

	https://ubuntu.com/security/notices/USN-4244-1	ADVISORY
	https://ubuntu.com/security/CVE-2019-14902	REPORT
	https://ubuntu.com/security/CVE-2019-14907	REPORT
	https://ubuntu.com/security/CVE-2019-19344	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2019-14907",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ctdb",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "python-samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "registry-tools",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-common",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-libs",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "smbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          },
          {
            "binary_name": "winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "samba",
        "purl": "pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.16.04.25?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:4.3.11+dfsg-0ubuntu0.16.04.25"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:4.1.17+dfsg-4ubuntu2",
        "2:4.1.20+dfsg-1ubuntu1",
        "2:4.1.20+dfsg-1ubuntu2",
        "2:4.1.20+dfsg-1ubuntu3",
        "2:4.1.20+dfsg-1ubuntu5",
        "2:4.3.3+dfsg-1ubuntu1",
        "2:4.3.3+dfsg-1ubuntu2",
        "2:4.3.3+dfsg-1ubuntu3",
        "2:4.3.6+dfsg-1ubuntu1",
        "2:4.3.8+dfsg-0ubuntu1",
        "2:4.3.9+dfsg-0ubuntu0.16.04.1",
        "2:4.3.9+dfsg-0ubuntu0.16.04.2",
        "2:4.3.9+dfsg-0ubuntu0.16.04.3",
        "2:4.3.11+dfsg-0ubuntu0.16.04.1",
        "2:4.3.11+dfsg-0ubuntu0.16.04.3",
        "2:4.3.11+dfsg-0ubuntu0.16.04.5",
        "2:4.3.11+dfsg-0ubuntu0.16.04.6",
        "2:4.3.11+dfsg-0ubuntu0.16.04.7",
        "2:4.3.11+dfsg-0ubuntu0.16.04.8",
        "2:4.3.11+dfsg-0ubuntu0.16.04.9",
        "2:4.3.11+dfsg-0ubuntu0.16.04.10",
        "2:4.3.11+dfsg-0ubuntu0.16.04.11",
        "2:4.3.11+dfsg-0ubuntu0.16.04.12",
        "2:4.3.11+dfsg-0ubuntu0.16.04.13",
        "2:4.3.11+dfsg-0ubuntu0.16.04.15",
        "2:4.3.11+dfsg-0ubuntu0.16.04.16",
        "2:4.3.11+dfsg-0ubuntu0.16.04.17",
        "2:4.3.11+dfsg-0ubuntu0.16.04.18",
        "2:4.3.11+dfsg-0ubuntu0.16.04.19",
        "2:4.3.11+dfsg-0ubuntu0.16.04.20",
        "2:4.3.11+dfsg-0ubuntu0.16.04.21",
        "2:4.3.11+dfsg-0ubuntu0.16.04.23",
        "2:4.3.11+dfsg-0ubuntu0.16.04.24"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2019-14902",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-14907",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "ctdb",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "python-samba",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "registry-tools",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-common",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-libs",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "smbclient",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          },
          {
            "binary_name": "winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "samba",
        "purl": "pkg:deb/ubuntu/samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.15?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2:4.7.6+dfsg~ubuntu-0ubuntu2.15"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2:4.6.7+dfsg-1ubuntu3",
        "2:4.7.1+dfsg-1ubuntu1",
        "2:4.7.3+dfsg-1ubuntu1",
        "2:4.7.4+dfsg-1ubuntu1",
        "2:4.7.6+dfsg~ubuntu-0ubuntu1",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.2",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.4",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.5",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.6",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.7",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.9",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.10",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.13",
        "2:4.7.6+dfsg~ubuntu-0ubuntu2.14"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that Samba did not automatically replicate ACLs set to\ninherit down a subtree on AD Directory, contrary to expectations. This\nissue was only addressed in Ubuntu 18.04 LTS, Ubuntu 19.04 and Ubuntu\n19.10. (CVE-2019-14902)\n\nRobert \u015awi\u0119cki discovered that Samba incorrectly handled certain character\nconversions when the log level is set to 3 or above. In certain\nenvironments, a remote attacker could possibly use this issue to cause\nSamba to crash, resulting in a denial of service. (CVE-2019-14907)\n\nChristian Naumer discovered that Samba incorrectly handled DNS zone\nscavenging. This issue could possibly result in some incorrect data being\nwritten to the DB. This issue only applied to Ubuntu 19.04 and Ubuntu\n19.10. (CVE-2019-19344)\n",
  "id": "USN-4244-1",
  "modified": "2026-04-27T14:11:25Z",
  "published": "2020-01-21T12:59:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4244-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-14902"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-14907"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-19344"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "samba vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2019-14902",
    "UBUNTU-CVE-2019-14907",
    "UBUNTU-CVE-2019-19344"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

UBUNTU-CVE-2019-14907 (CVE-2019-14907)

CVE-2019-14907 (GCVE-0-2019-14907)

USN-4244-1 (UBUNTU-CVE-2019-14902)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour