CVE-2019-12436

2019-06-1912:15:10

Debian Security Bug Tracker

security-tracker.debian.org

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.017 Low

EPSS

Percentile

87.8%

JSON

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.

OSVersionArchitecturePackageVersionFilename
Debian12allsamba< 2:4.17.12+dfsg-0+deb12u1samba_2:4.17.12+dfsg-0+deb12u1_all.deb
Debian11allsamba< 2:4.13.13+dfsg-1~deb11u6samba_2:4.13.13+dfsg-1~deb11u6_all.deb
Debian999allsamba< 2:4.20.2+dfsg-5samba_2:4.20.2+dfsg-5_all.deb
Debian13allsamba< 2:4.20.2+dfsg-2samba_2:4.20.2+dfsg-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	samba	< 2:4.17.12+dfsg-0+deb12u1	samba_2:4.17.12+dfsg-0+deb12u1_all.deb
Debian	11	all	samba	< 2:4.13.13+dfsg-1~deb11u6	samba_2:4.13.13+dfsg-1~deb11u6_all.deb
Debian	999	all	samba	< 2:4.20.2+dfsg-5	samba_2:4.20.2+dfsg-5_all.deb
Debian	13	all	samba	< 2:4.20.2+dfsg-2	samba_2:4.20.2+dfsg-2_all.deb