CVE-2019-14847

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.

References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type

GIT

Repo

https://github.com/samba-team/samba

Events

Introduced

df33344d8eb40221d60c99931690703a11d91bc2

Fixed

0d69a39c463ea7da23f3b2d1aecedb2d6bbcfd15

Introduced

25f2fe02a615e2cf906b6fa495acd8ea0aa9998a

Fixed

e6f6df7658d0f147a32af157cffaf11b69e59a2b

Database specific

{
    "versions": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.9.15"
        },
        {
            "introduced": "4.10.0"
        },
        {
            "fixed": "4.10.10"
        }
    ]
}

Affected versions

ldb-1.*

ldb-1.5.5

ldb-1.5.6

samba-4.*

samba-4.10.0

samba-4.10.1

samba-4.10.2

samba-4.10.3

samba-4.10.4

samba-4.10.5

samba-4.10.6

samba-4.10.7

samba-4.10.8

samba-4.10.9

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "29"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "30"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.0"
            }
        ]
    }
]

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-14847.json"