PT-2019-4609 · Samba+3 · Samba+3

Published 2019-06-19 · Updated 2024-06-15 · CVE-2019-12435

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samba versions 4.9.x through 4.9.8 Samba versions 4.10.x through 4.10.4

Description The issue is related to a NULL pointer dereference, leading to Denial of Service. This is connected to the AD DC DNS management server (dnsserver) RPC server process. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations For Samba versions 4.9.x through 4.9.8, update to version 4.9.9 or later. For Samba versions 4.10.x through 4.10.4, update to version 4.10.5 or later.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2019-2360

ALT-PU-2019-2492

BDU:2020-00724

CVE-2019-12435

ECHO-04D0-DB7E-8E8F

MGASA-2019-0286

OPENSUSE-SU-2019:1755-1

OPENSUSE-SU-2019_1755-1

OPENSUSE-SU-2024:11365-1

SUSE-SU-2019:1574-1

SUSE-SU-2019:1574-2

SUSE-SU-2019_1574-1

USN-4018-1

Affected Products

Alt Linux

Samba

Suse

Ubuntu

References · 109

• https://wiki.astralinux.ru/pages/viewpage.action?pageId=57444186 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12435 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/QSG3TLPZP35RH5DWAIDC7MHXRK5DFKOE · Vendor Advisory
• https://samba.org/samba/security/CVE-2019-12435.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0286 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:1574-2 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QSG3TLPZP35RH5DWAIDC7MHXRK5DFKOE · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00023.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-12435 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4018-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0286.html · Security Note
• https://osv.dev/vulnerability/CVE-2019-12435 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQ3LCJNJ3ONHIRKDSKOTT6QGXALLCHVG · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00724 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-12435 · Vendor Advisory