Description
There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat samba
all samba 4.11.x versions before 4.11.5affectedall samba 4.10.x versions before 4.10.12affectedall samba 4.9.x versions before 4.9.18affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19344 ↗
- https://www.samba.org/samba/security/CVE-2019-19344.html ↗
- https://security.netapp.com/advisory/ntap-20200122-0001/ ↗
- https://www.synology.com/security/advisory/Synology_SA_20_01 ↗
- https://usn.ubuntu.com/4244-1/ ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GQ6U65I2K23YJC4FESW477WL55TU3PPT/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ACZVNMIFQGGXNJPMHAVBN3H2U65FXQY/ ↗
- https://security.gentoo.org/glsa/202003-52 ↗
- https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html ↗