CVE-2019-14907

Name
CVE-2019-14907
Description
All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Vendor Advisory https://www.samba.org/samba/security/CVE-2019-14907.html
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14907
Third Party Advisory https://security.netapp.com/advisory/ntap-20200122-0001/
Third Party Advisory https://www.synology.com/security/advisory/Synology_SA_20_01
Third Party Advisory https://usn.ubuntu.com/4244-1/
Third Party Advisory http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html
Third Party Advisory https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/
Mailing List https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/
Third Party Advisory https://security.gentoo.org/glsa/202003-52
MLIST https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html
secalert@redhat.com https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html
secalert@redhat.com https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/
secalert@redhat.com https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* samba >= 4.9.0 < 4.9.18
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* samba >= 4.10.0 < 4.10.12
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* samba >= 4.11.0 < 4.11.5
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* fedora == None == 30
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:* fedora == None == 31

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
samba edge-main 4.11.5-r0 None fixed
samba edge-main 4.11.3-r0 None possibly vulnerable
samba edge-main 4.11.2-r0 None possibly vulnerable
samba edge-main 4.10.8-r0 None possibly vulnerable
samba edge-main 4.10.5-r0 None possibly vulnerable
samba edge-main 4.10.3-r0 None possibly vulnerable
samba 3.22-main 4.11.5-r0 None fixed
samba 3.22-main 4.11.3-r0 None possibly vulnerable
samba 3.22-main 4.11.2-r0 None possibly vulnerable
samba 3.22-main 4.10.8-r0 None possibly vulnerable
samba 3.22-main 4.10.5-r0 None possibly vulnerable
samba 3.22-main 4.10.3-r0 None possibly vulnerable
samba 3.21-main 4.11.5-r0 None fixed
samba 3.21-main 4.11.3-r0 None possibly vulnerable
samba 3.21-main 4.11.2-r0 None possibly vulnerable
samba 3.21-main 4.10.8-r0 None possibly vulnerable
samba 3.21-main 4.10.5-r0 None possibly vulnerable
samba 3.21-main 4.10.3-r0 None possibly vulnerable
samba 3.20-main 4.11.5-r0 None fixed
samba 3.20-main 4.11.3-r0 None possibly vulnerable
samba 3.20-main 4.11.2-r0 None possibly vulnerable
samba 3.20-main 4.10.8-r0 None possibly vulnerable
samba 3.20-main 4.10.5-r0 None possibly vulnerable
samba 3.20-main 4.10.3-r0 None possibly vulnerable
samba 3.19-main 4.11.5-r0 None fixed
samba 3.19-main 4.11.3-r0 None possibly vulnerable
samba 3.19-main 4.11.2-r0 None possibly vulnerable
samba 3.19-main 4.10.8-r0 None possibly vulnerable
samba 3.19-main 4.10.5-r0 None possibly vulnerable
samba 3.19-main 4.10.3-r0 None possibly vulnerable
samba 3.18-main 4.11.5-r0 None fixed
samba 3.17-main 4.11.5-r0 None fixed
samba 3.12-main 4.11.5-r0 None fixed
samba 3.11-main 4.11.5-r0 None fixed
samba 3.10-main 4.10.12-r0 None fixed