CVEvulnerability
CVE-2019-14902
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-284
Description
There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
Affected configurations
• samba samba (>= 4.0.0 < 4.9.18)
• samba samba (>= 4.10.0 < 4.10.12)
• samba samba (>= 4.11.0 < 4.11.5)
• canonical ubuntu linux 16.04
• canonical ubuntu linux 18.04
• canonical ubuntu linux 19.04
• canonical ubuntu linux 19.10
• opensuse leap 15.1
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14902 Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202003-52 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200122-0001/ Third Party Advisory
- https://usn.ubuntu.com/4244-1/ Third Party Advisory
- https://www.samba.org/samba/security/CVE-2019-14902.html Mailing List, Vendor Advisory
- https://www.synology.com/security/advisory/Synology_SA_20_01 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14902 Issue Tracking, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html lists.debian.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/ lists.fedoraproject.org
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/ lists.fedoraproject.org
- https://security.gentoo.org/glsa/202003-52 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200122-0001/ Third Party Advisory
- https://usn.ubuntu.com/4244-1/ Third Party Advisory
- https://www.samba.org/samba/security/CVE-2019-14902.html Mailing List, Vendor Advisory
- https://www.synology.com/security/advisory/Synology_SA_20_01 Third Party Advisory