{"id":"CVE-2019-14847","state":"PUBLISHED","title":"A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege e","description":"A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.","publishedAt":"2019-11-06T00:00:00.000Z","updatedAt":"2024-08-05T00:26:39.104Z","severity":{"score":4.9,"label":"Medium","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","source":"redhat"},"assigner":"redhat","products":["Samba samba"],"affected":[{"vendor":"Samba","product":"samba","versions":[{"version":"samba 4.0.0 before samba 4.9.15, samba 4.10.x before 4.10.10","status":"affected"}]}],"references":["https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14847","https://www.samba.org/samba/security/CVE-2019-14847.html","https://www.synology.com/security/advisory/Synology_SA_19_35","http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/","https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html","https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T19:45:30.451Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/14xxx/CVE-2019-14847.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-14847","state":"PUBLISHED","datePublished":"2019-11-06T00:00:00.000Z","dateUpdated":"2024-08-05T00:26:39.104Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2019-08-10T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue."}],"affected":[{"vendor":"Samba","product":"samba","versions":[{"version":"samba 4.0.0 before samba 4.9.15, samba 4.10.x before 4.10.10","status":"affected"}]}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14847"},{"url":"https://www.samba.org/samba/security/CVE-2019-14847.html"},{"url":"https://www.synology.com/security/advisory/Synology_SA_19_35"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html","name":"openSUSE-SU-2019:2458","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/","name":"FEDORA-2019-703e299870","tags":["vendor-advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/","name":"FEDORA-2019-460ad648e7","tags":["vendor-advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html","name":"[debian-lts-announce] 20210529 [SECURITY] [DLA 2668-1] samba security update","tags":["mailing-list"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html","name":"[debian-lts-announce] 20230914 [SECURITY] [DLA 3563-1] samba security update","tags":["mailing-list"]}],"metrics":[{"cvssV3_0":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseScore":4.9,"baseSeverity":"MEDIUM"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","type":"CWE","lang":"en","description":"CWE-476"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2023-09-14T16:06:14.311Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14847","tags":["x_transferred"]},{"url":"https://www.samba.org/samba/security/CVE-2019-14847.html","tags":["x_transferred"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_19_35","tags":["x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html","name":"openSUSE-SU-2019:2458","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/","name":"FEDORA-2019-703e299870","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/","name":"FEDORA-2019-460ad648e7","tags":["vendor-advisory","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html","name":"[debian-lts-announce] 20210529 [SECURITY] [DLA 2668-1] samba security update","tags":["mailing-list","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html","name":"[debian-lts-announce] 20230914 [SECURITY] [DLA 3563-1] samba security update","tags":["mailing-list","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T00:26:39.104Z"}}]}}}