Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2019-19344

There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to

Description

There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc() while other local variables still point at the original buffer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat samba

  • all samba 4.11.x versions before 4.11.5affected
  • all samba 4.10.x versions before 4.10.12affected
  • all samba 4.9.x versions before 4.9.18affected

References