Lucene search

K
redhatcveRedhat.comRH:CVE-2019-12436
HistoryApr 02, 2020 - 8:02 p.m.

CVE-2019-12436

2020-04-0220:02:54
redhat.com
access.redhat.com
13

0.017 Low

EPSS

Percentile

87.8%

Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.

Mitigation

Return to the default configuration by running 'samba' with -M standard, however this may consume more memory.