SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-14907

(In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).

MEDIUM 6.5EPSS 3.15%

Does this matter?

Lower severity and a low EPSS score (3.15%). Track it; it rarely justifies an emergency change on its own.

Description

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).

CVSS 3.1
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
3.15% probability · 87th percentile
CISA KEV
Not listed
Weakness
CWE-125
Affected
samba/samba · fedoraproject/fedora · redhat/storage · redhat/enterprise linux · canonical/ubuntu linux · synology/directory server · synology/router manager · synology/skynas · synology/diskstation manager · debian/debian linux
Source
secalert@redhat.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.