CVE-2019-14902

Severity

54%

Complexity

27%

Confidentiality

41%

There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.

There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.

CVSS 3.1 Base Score 5.4. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).

CVSS 2.0 Base Score 5.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:P/A:N).

Overview

First reported 5 years ago

2020-01-21 18:15:00

Last updated 5 years ago

2020-02-02 04:15:00

Affected Software

Samba Samba

Canonical Ubuntu Linux 16.04 LTS (Long-Term Support)

16.04

Canonical Ubuntu Linux 18.04 LTS Edition

18.04

Canonical Ubuntu Linux 19.04

19.04

Canonical Ubuntu Linux 19.10

19.10

OpenSUSE Leap 15.1

15.1

References

openSUSE-SU-2020:0122

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14902

Issue Tracking, Third Party Advisory

FEDORA-2020-f92cd0e72b

FEDORA-2020-6bd386c7eb

GLSA-202003-52

https://security.netapp.com/advisory/ntap-20200122-0001/

Third Party Advisory

USN-4244-1

Third Party Advisory

https://www.samba.org/samba/security/CVE-2019-14902.html

Mailing List, Vendor Advisory

https://www.synology.com/security/advisory/Synology_SA_20_01

Third Party Advisory

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.