Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2019-3880 PUBLISHED CVSS 5.400000095367432 MEDIUM

A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.

Risk Scores

CVSS v3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Affected Products

VendorProductVersions
Alpine:v3.22samba3.2.11-r0, 4.8.8-r0, 4.8.7-r0
Alpine:v3.19samba4.8.7-r0, 3.2.10-r0, 3.2.8-r0
Alpine:v3.11samba0, 3.2.10-r0, 3.2.11-r0
Alpine:v3.15samba4.8.8-r0, 0, 3.2.10-r0
Alpine:v3.18samba4.1.0-r1, 4.8.8-r0, 4.8.7-r0
Alpine:v3.21samba4.8.7-r0, 0, 3.2.10-r0
Alpine:v3.20samba3.5.9-r1, 0, 3.2.11-r0
Alpine:v3.7samba4.2.1-r0, 3.5.6-r1, 3.2.11-r0
Alpine:v3.6samba3.5.4-r1, 3.6.4-r0, 3.6.4-r0
Alpine:v3.13samba4.7.4-r0, 4.7.3-r0, 4.7.2-r0
Alpine:v3.8samba3.5.4-r1, 3.3.7-r0, 3.3.6-r0
Alpine:v3.14samba0, 3.2.10-r0, 3.3.4-r0
Alpine:v3.16samba4.8.8-r0, 0, 3.2.10-r0
Alpine:v3.17samba3.2.11-r0, 0, 4.8.8-r0
Alpine:v3.9samba4.8.8-r0, 3.2.11-r0, 3.2.8-r0
Alpine:v3.23samba0, 3.2.10-r0, 3.2.11-r0
Alpine:v3.10samba4.8.4-r1, 4.8.8-r0, 4.8.7-r0
Alpine:v3.12samba4.8.8-r0, 3.2.10-r0, 3.2.11-r0

Timeline

References

Open in Interactive Console →