ALPINE-CVE-2019-14861
Record from OSV · Published December 10, 2019
All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| samba | Alpine:v3.11 | 4.11.3-r0 |
| samba | Alpine:v3.13 | 4.11.3-r0 |
| samba | Alpine:v3.18 | 4.11.3-r0 |
| samba | Alpine:v3.24 | 4.11.3-r0 |
| samba | Alpine:v3.16 | 4.11.3-r0 |
| samba | Alpine:v3.15 | 4.11.3-r0 |
| samba | Alpine:v3.10 | 4.10.11-r0 |
| samba | Alpine:v3.22 | 4.11.3-r0 |
| samba | Alpine:v3.20 | 4.11.3-r0 |
| samba | Alpine:v3.21 | 4.11.3-r0 |
| samba | Alpine:v3.17 | 4.11.3-r0 |
| samba | Alpine:v3.14 | 4.11.3-r0 |
3 more packages have a fixed version. See every fix in Lookup.
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.11 | samba | 3.5.9-r0, 4.1.3-r0, 4.8.2-r0 |
| Alpine:v3.13 | samba | 3.6.3-r0, 0, 3.2.11-r0 |
| Alpine:v3.18 | samba | 3.6.13-r1, 4.1.14-r0, 4.0.0 |
| Alpine:v3.24 | samba | 4.0.0, 0 |
| Alpine:v3.16 | samba | 4.7.6-r0, 4.7.0-r1, 3.5.6-r1 |
| Alpine:v3.15 | samba | 3.6.6-r0, 0, 3.2.10-r0 |
| Alpine:v3.10 | samba | 4.0.0, 4.1.3-r1, 3.6.8-r1 |
| Alpine:v3.22 | samba | 3.2.8-r1, 3.2.8-r0, 4.0.0 |
| Alpine:v3.20 | samba | 3.5.9-r1, 0, 3.2.11-r0 |
| Alpine:v3.21 | samba | 3.2.10-r0, 3.3.7-r1, 0 |
| Alpine:v3.17 | samba | 3.2.10-r0, 3.2.11-r1, 3.2.8-r0 |
| Alpine:v3.14 | samba | 4.6.1-r2, 0, 3.2.10-r0 |
| Alpine:v3.19 | samba | 4.0.0, 3.3.4-r0, 3.6.6-r0 |
| Alpine:v3.23 | samba | 4.6.5-r0, 3.2.10-r0, 3.2.11-r0 |
| Alpine:v3.12 | samba | 4.11.2-r0, 3.2.10-r0, 3.6.6-r0 |
Timeline
- Dec 10, 2019 CVE Published
- Jul 8, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln ALPINE-CVE-2019-14861
vulnetix vdb fixes ALPINE-CVE-2019-14861Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/ALPINE-CVE-2019-14861/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart