CVE-2019-3880

Name: CVE-2019-3880
Creator: NVD / NIST
Published: 2019-04-09T16:29:01.927+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.4/10EPSS 3.39%

Last modified Jun 17, 2026

CVE-2019-3880 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. EPSS estimates a 3.39% chance of exploitation in the next 30 days.

Description

A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.

Metrics

CVSS 3.1

5.4/10

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

EPSS Probability

3.39%

87.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Samba	Samba	>= 3.2.0, < 4.8.11
Samba	Samba	>= 4.9.0, < 4.9.6
Samba	Samba	>= 4.10.0, < 4.10.2
Debian	Debian Linux	8.0
Redhat	Gluster Storage	3.0
Redhat	Enterprise Linux	7.0
Fedoraproject	Fedora	28
Fedoraproject	Fedora	29
Fedoraproject	Fedora	30
Opensuse	Leap	42.3

References

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00050.htmlMailing List, Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00106.htmlThird Party Advisory
https://access.redhat.com/errata/RHSA-2019:1966Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1967Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2099Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3582Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3880Issue Tracking, Mitigation, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00013.htmlThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6354GALK73CZWQKFUG7AWB6EIEGFMF62/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSRLRO7BPRFETVFZ4TVJL2VFZEPHKJY4/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTJVFA3RZ6G2IZDTVKLHRMX6QBYA4GPA/
https://security.netapp.com/advisory/ntap-20190411-0004/Third Party Advisory
https://support.f5.com/csp/article/K20804356Third Party Advisory
https://www.samba.org/samba/security/CVE-2019-3880.htmlMitigation, Patch, Vendor Advisory
https://www.synology.com/security/advisory/Synology_SA_19_15Third Party Advisory
https://access.redhat.com/security/cve/cve-2019-3880Mitigation, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00050.htmlMailing List, Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00106.htmlThird Party Advisory
https://access.redhat.com/errata/RHSA-2019:1966Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:1967Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:2099Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:3582Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3880Issue Tracking, Mitigation, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00013.htmlThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6354GALK73CZWQKFUG7AWB6EIEGFMF62/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSRLRO7BPRFETVFZ4TVJL2VFZEPHKJY4/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTJVFA3RZ6G2IZDTVKLHRMX6QBYA4GPA/
https://security.netapp.com/advisory/ntap-20190411-0004/Third Party Advisory
https://support.f5.com/csp/article/K20804356Third Party Advisory
https://www.samba.org/samba/security/CVE-2019-3880.htmlMitigation, Patch, Vendor Advisory
https://www.synology.com/security/advisory/Synology_SA_19_15Third Party Advisory

Timeline

Published: Apr 9, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2019-3880?

How severe is CVE-2019-3880?

CVE-2019-3880 has a CVSS score of 5.4/10 (MEDIUM severity). The EPSS model estimates a 3.39% probability of exploitation in the next 30 days.

How do I fix CVE-2019-3880?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-3880?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST