VDB

CVE-2019-14847

CVE-2019-14847 PUBLISHED CVSS 4.900000095367432 MEDIUM

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.

EPSS 2.11% · 81.1th percentile

Risk Scores

CVSS 3.0
4.900000095367432
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
2.11%
81.1th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSsamba2:4.6.7+dfsg-1ubuntu3, 2:4.7.1+dfsg-1ubuntu1, 2:4.7.3+dfsg-1ubuntu1
Ubuntu:Pro:14.04:LTSsamba*, 2:4.1.6+dfsg-1ubuntu2, 2:4.1.6+dfsg-1ubuntu2.14.04.1
Ubuntu:16.04:LTSsamba2:4.1.17+dfsg-4ubuntu2, 2:4.1.20+dfsg-1ubuntu1, 2:4.1.20+dfsg-1ubuntu2

Timeline

  • Oct 28, 2019 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 2, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Dec 28, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • Jul 5, 2022 EPSS Score
  • Nov 9, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›