PT-2019-5771 · Samba+5 · Samba+5

Published 2019-12-10 · Updated 2024-06-15 · CVE-2019-14870

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Samba versions 4.x.x before 4.9.17 Samba versions 4.10.x before 4.10.11 Samba versions 4.11.x before 4.11.3

Description The issue is related to the S4U (MS-SFU) Kerberos delegation model in Samba, which includes a feature allowing for a subset of clients to be opted out of constrained delegation. However, the Samba AD DC does not implement this feature correctly for S4U2Self and sets the forwardable flag even if the impersonated client has the not-delegated flag set. This can allow a remote attacker to access and compromise confidential data.

Recommendations For Samba versions 4.x.x before 4.9.17, update to version 4.9.17 or later. For Samba versions 4.10.x before 4.10.11, update to version 4.10.11 or later. For Samba versions 4.11.x before 4.11.3, update to version 4.11.3 or later. As a temporary workaround, consider disabling the S4U2Self feature until a patch is available. Restrict access to sensitive data and implement additional security measures to minimize the risk of exploitation.

Fix

Improper Authentication

Improper Authorization

Weakness Enumeration

CWE-287

CWE-285

Related Identifiers

ALT-PU-2019-3315

ALT-PU-2019-3404

BDU:2021-01743

CVE-2019-14870

DLA-2668-1

DLA-3206-1

ECHO-6F51-4099-25C6

FREEBSD-SA-22_14

MGASA-2019-0397

MGASA-2022-0468

OPENSUSE-SU-2019:2700-1

OPENSUSE-SU-2019_2700-1

OPENSUSE-SU-2023:0019-1

OPENSUSE-SU-2023:0020-1

OPENSUSE-SU-2024:11365-1

OPENSUSE-SU-2024:12580-1

SUSE-SU-2019:3318-1

SUSE-SU-2019:3319-1

SUSE-SU-2020:2673-1

USN-4217-1

USN-4217-2

Affected Products

Alt Linux

Astra Linux

Freebsd

Samba

Suse

Ubuntu

References · 154

• https://cve.org/CVERecord?id=CVE-2019-14870 · Security Note
• https://ubuntu.com/security/CVE-2019-14870 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WNKA4YIPV7AZR7KK3GW6L3HKGHSGJZFE · Vendor Advisory
• https://usn.ubuntu.com/4217-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2673-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3206-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2019-0397.html · Security Note
• https://osv.dev/vulnerability/MGASA-2019-0397 · Vendor Advisory
• https://samba.org/samba/security/CVE-2019-14870.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/PJH3ROOFYMOATD2UEPC47P5RPBDTY77E · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/WNKA4YIPV7AZR7KK3GW6L3HKGHSGJZFE · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00038.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-14870 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4217-2 · Vendor Advisory
• https://debian.org/security/2022/dsa-5286 · Vendor Advisory