Description
A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://lists.debian.org/debian-lts-announce/2019/03/msg00000.html ↗
- https://www.debian.org/security/2019/dsa-4397 ↗
- https://bugzilla.samba.org/show_bug.cgi?id=13773 ↗
- https://usn.ubuntu.com/3895-1/ ↗
- http://www.securityfocus.com/bid/107347 ↗
- https://security.netapp.com/advisory/ntap-20190226-0001/ ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3824 ↗
- http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00035.html ↗