UBUNTU-CVE-2019-10197

See a problem?

Source

https://ubuntu.com/security/notices/UBUNTU-CVE-2019-10197

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2019/UBUNTU-CVE-2019-10197.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2019-10197

Related

CVE-2019-10197
USN-4121-1

Published

2019-09-03T00:00:00Z

Modified

2019-09-03T00:00:00Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

[none]

Details

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.

References

Affected packages

Ubuntu:16.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.16.04.21?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.11+dfsg-0ubuntu0.16.04.21

Affected versions

2:4.*

2:4.1.17+dfsg-4ubuntu2

2:4.1.20+dfsg-1ubuntu1

2:4.1.20+dfsg-1ubuntu2

2:4.1.20+dfsg-1ubuntu3

2:4.1.20+dfsg-1ubuntu5

2:4.3.3+dfsg-1ubuntu1

2:4.3.3+dfsg-1ubuntu2

2:4.3.3+dfsg-1ubuntu3

2:4.3.6+dfsg-1ubuntu1

2:4.3.8+dfsg-0ubuntu1

2:4.3.9+dfsg-0ubuntu0.16.04.1

2:4.3.9+dfsg-0ubuntu0.16.04.2

2:4.3.9+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.1

2:4.3.11+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.5

2:4.3.11+dfsg-0ubuntu0.16.04.6

2:4.3.11+dfsg-0ubuntu0.16.04.7

2:4.3.11+dfsg-0ubuntu0.16.04.8

2:4.3.11+dfsg-0ubuntu0.16.04.9

2:4.3.11+dfsg-0ubuntu0.16.04.10

2:4.3.11+dfsg-0ubuntu0.16.04.11

2:4.3.11+dfsg-0ubuntu0.16.04.12

2:4.3.11+dfsg-0ubuntu0.16.04.13

2:4.3.11+dfsg-0ubuntu0.16.04.15

2:4.3.11+dfsg-0ubuntu0.16.04.16

2:4.3.11+dfsg-0ubuntu0.16.04.17

2:4.3.11+dfsg-0ubuntu0.16.04.18

2:4.3.11+dfsg-0ubuntu0.16.04.19

2:4.3.11+dfsg-0ubuntu0.16.04.20

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libwbclient-dev": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-libs": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "registry-tools": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-common-bin": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libwbclient0-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-dsdb-modules-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libpam-winbind-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libnss-winbind-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "winbind": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-vfs-modules": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-common-bin-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-testsuite": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "smbclient-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libsmbclient": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libsmbclient-dev": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libwbclient0": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libparse-pidl-perl-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-dsdb-modules": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "registry-tools-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-vfs-modules-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "python-samba": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "ctdb": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libsmbclient-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libnss-winbind": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libsmbclient-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-libs-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-dbg": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-testsuite-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-common": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "winbind-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libpam-winbind": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "smbclient": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libwbclient-dev-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "samba-dev": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "libparse-pidl-perl": "2:4.3.11+dfsg-0ubuntu0.16.04.21",
            "ctdb-dbgsym": "2:4.3.11+dfsg-0ubuntu0.16.04.21"
        }
    ]
}

Ubuntu:18.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.11?arch=src?distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.7.6+dfsg~ubuntu-0ubuntu2.11

Affected versions

2:4.*

2:4.6.7+dfsg-1ubuntu3

2:4.7.1+dfsg-1ubuntu1

2:4.7.3+dfsg-1ubuntu1

2:4.7.4+dfsg-1ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu2

2:4.7.6+dfsg~ubuntu-0ubuntu2.2

2:4.7.6+dfsg~ubuntu-0ubuntu2.4

2:4.7.6+dfsg~ubuntu-0ubuntu2.5

2:4.7.6+dfsg~ubuntu-0ubuntu2.6

2:4.7.6+dfsg~ubuntu-0ubuntu2.7

2:4.7.6+dfsg~ubuntu-0ubuntu2.9

2:4.7.6+dfsg~ubuntu-0ubuntu2.10

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "libwbclient-dev": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-libs": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "registry-tools": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-common-bin": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libwbclient0-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-dsdb-modules-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libpam-winbind-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libnss-winbind-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "winbind": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-vfs-modules": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "python-samba-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-common-bin-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-testsuite": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "smbclient-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libsmbclient": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libwbclient0": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libsmbclient-dev": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "python-samba": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-dsdb-modules": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "registry-tools-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-vfs-modules-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "ctdb": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libnss-winbind": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libsmbclient-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-libs-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "winbind-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-testsuite-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-common": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libpam-winbind": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "smbclient": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "samba-dev": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "libparse-pidl-perl": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11",
            "ctdb-dbgsym": "2:4.7.6+dfsg~ubuntu-0ubuntu2.11"
        }
    ]
}