Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2019-10197

Опубликовано: 03 сент. 2019
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.4
CVSS3: 6.5

Описание

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.

РелизСтатусПримечание
bionic

not-affected

2:4.7.6+dfsg~ubuntu-0ubuntu2.11
devel

not-affected

2:4.10.7+dfsg-0ubuntu2
disco

released

2:4.10.0+dfsg-0ubuntu2.4
esm-infra-legacy/trusty

not-affected

esm-infra/bionic

not-affected

2:4.7.6+dfsg~ubuntu-0ubuntu2.11
esm-infra/xenial

not-affected

2:4.3.11+dfsg-0ubuntu0.16.04.21
precise/esm

not-affected

trusty

not-affected

trusty/esm

not-affected

upstream

needs-triage

Показывать по

EPSS

Процентиль: 89%
0.04729
Низкий

6.4 Medium

CVSS2

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
redhat
больше 6 лет назад

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.

CVSS3: 6.5
nvd
больше 6 лет назад

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.

CVSS3: 6.5
debian
больше 6 лет назад

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up ...

suse-cvrf
больше 6 лет назад

Security update for samba

CVSS3: 9.1
github
больше 3 лет назад

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.

EPSS

Процентиль: 89%
0.04729
Низкий

6.4 Medium

CVSS2

6.5 Medium

CVSS3