Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-3824

Опубликовано: 06 мар. 2019
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Версия до 4.10.0 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 91%
0.07029
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 7 лет назад

A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.

CVSS3: 6.5
redhat
почти 7 лет назад

A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.

CVSS3: 6.5
debian
почти 7 лет назад

A flaw was found in the way an LDAP search expression could crash the ...

suse-cvrf
почти 7 лет назад

Security update for ldb

suse-cvrf
почти 7 лет назад

Security update for ldb

EPSS

Процентиль: 91%
0.07029
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-125