Strix
26.1K

CVE-2019-14907

MEDIUMCVSS 6.5/10EPSS 3.15%

Last modified

CVE-2019-14907 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. EPSS estimates a 3.15% chance of exploitation in the next 30 days.

Description

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).

Metrics

CVSS 3.1
6.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Probability
3.15%

86.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
SambaSamba>= 4.9.0, < 4.9.18
SambaSamba>= 4.10.0, < 4.10.12
SambaSamba>= 4.11.0, < 4.11.5
FedoraprojectFedora30
FedoraprojectFedora31
RedhatStorage3.0
RedhatEnterprise Linux7.0
RedhatEnterprise Linux8.0
CanonicalUbuntu Linux16.04
CanonicalUbuntu Linux18.04
CanonicalUbuntu Linux19.04
CanonicalUbuntu Linux19.10
SynologyDirectory ServerAll versions
SynologyRouter Manager1.2
SynologySkynasAll versions
SynologyDiskstation Manager6.2
DebianDebian Linux9.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-14907?
All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
How severe is CVE-2019-14907?
CVE-2019-14907 has a CVSS score of 6.5/10 (MEDIUM severity). The EPSS model estimates a 3.15% probability of exploitation in the next 30 days.
How do I fix CVE-2019-14907?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-14907?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST