CVE-2019-10197

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.

Link	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10197	Issue Tracking Mitigation
https://www.samba.org/samba/security/CVE-2019-10197.html	Vendor Advisory
https://security.netapp.com/advisory/ntap-20190903-0001/	Third Party Advisory
https://usn.ubuntu.com/4121-1/	Third Party Advisory
https://www.debian.org/security/2019/dsa-4513	Third Party Advisory
https://seclists.org/bugtraq/2019/Sep/4	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00045.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/M7NYIUZOCIDXWXGWMZ7O5Z7OJ6IX7EAB/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/56ZUXHGDHPM7S6RVAKULZT5EATS37OKA/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z6EEKFT24DQI4DMZMSQTLMNZWG4RMZ57/
https://support.f5.com/csp/article/K69511801
https://support.f5.com/csp/article/K69511801?utm_source=f5support&utm_medium=RSS
https://access.redhat.com/errata/RHSA-2019:3253
https://access.redhat.com/errata/RHSA-2019:4023
https://security.gentoo.org/glsa/202003-52

Configuration 1

cpe:2.3:a:samba:samba:4.11.0:rc2:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.11.0:rc3:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.11.0:rc1:*:*:*:*:*:* cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.11.0:*:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.9.0:rc1:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.9.0:rc2:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.9.0:rc3:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.9.0:rc4:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.9.0:rc5:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.10.0:rc1:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.10.0:rc2:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.10.0:rc3:*:*:*:*:*:* cpe:2.3:a:samba:samba:4.10.0:rc4:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

---

Published : 2019-09-03 03:15

Updated : 2020-08-18 03:05

---

NVD link : CVE-2019-10197

Mitre link : CVE-2019-10197

No products.

CWE-22