Vulnerability Description
A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Samba | Samba | < 4.10.0 |
| Canonical | Ubuntu Linux | 14.04 |
| Debian | Debian Linux | 8.0 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00035.html
- http://www.securityfocus.com/bid/107347Third Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3824Issue TrackingPatchThird Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=13773Issue TrackingPatchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00000.htmlMailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20190226-0001/Third Party Advisory
- https://usn.ubuntu.com/3895-1/Third Party Advisory
- https://www.debian.org/security/2019/dsa-4397Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00035.html
- http://www.securityfocus.com/bid/107347Third Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3824Issue TrackingPatchThird Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=13773Issue TrackingPatchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2019/03/msg00000.htmlMailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20190226-0001/Third Party Advisory
- https://usn.ubuntu.com/3895-1/Third Party Advisory
FAQ
What is CVE-2019-3824?
CVE-2019-3824 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LD...
How severe is CVE-2019-3824?
CVE-2019-3824 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-3824?
Check the references section above for vendor advisories and patch information. Affected products include: Samba Samba, Canonical Ubuntu Linux, Debian Debian Linux.