PT-2019-4609 · Samba+3 · Samba+3

Publicado

2019-06-19

·

Atualizado

2024-06-15

·

CVE-2019-12435

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Samba versions 4.9.x through 4.9.8 Samba versions 4.10.x through 4.10.4
Description The issue is related to a NULL pointer dereference, leading to Denial of Service. This is connected to the AD DC DNS management server (dnsserver) RPC server process. The vulnerability can be exploited by a remote attacker to cause a denial of service.
Recommendations For Samba versions 4.9.x through 4.9.8, update to version 4.9.9 or later. For Samba versions 4.10.x through 4.10.4, update to version 4.10.5 or later.

Correção

DoS

NULL Pointer Dereference

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2019-2360
ALT-PU-2019-2492
BDU:2020-00724
CVE-2019-12435
ECHO-04D0-DB7E-8E8F
MGASA-2019-0286
OPENSUSE-SU-2019:1755-1
OPENSUSE-SU-2019_1755-1
OPENSUSE-SU-2024:11365-1
SUSE-SU-2019:1574-1
SUSE-SU-2019:1574-2
SUSE-SU-2019_1574-1
USN-4018-1

Produtos afetados

Alt Linux
Samba
Suse
Ubuntu