CVE-2019-12436

CVE-2019-12436

Name

CVE-2019-12436

Description

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
Vendor Advisory	https://www.samba.org/samba/security/CVE-2019-12436.html
Third Party Advisory	https://usn.ubuntu.com/4018-1/
BID	http://www.securityfocus.com/bid/108823
CONFIRM	https://www.synology.com/security/advisory/Synology_SA_19_27
FEDORA	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQ3LCJNJ3ONHIRKDSKOTT6QGXALLCHVG/

Type

URI

Vendor Advisory

https://www.samba.org/samba/security/CVE-2019-12436.html

Third Party Advisory

https://usn.ubuntu.com/4018-1/

BID

http://www.securityfocus.com/bid/108823

CONFIRM

https://www.synology.com/security/advisory/Synology_SA_19_27

FEDORA

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQ3LCJNJ3ONHIRKDSKOTT6QGXALLCHVG/