{"id":"CVE-2019-12435","aliases":["ALPINE-CVE-2019-12435","DEBIAN-CVE-2019-12435","EUVD-2019-4045","GHSA-8gjg-6f8w-gvhc","MGASA-2019-0286","SUSE-SU-2019:1574-1","SUSE-SU-2019:1574-2","UBUNTU-CVE-2019-12435","openSUSE-SU-2019:1755-1","openSUSE-SU-2024:11365-1"],"status":"published","title":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to...","description":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02139,"percentile":0.82155,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2019-06-19T00:00:00Z","modified":"2026-10-24T10:30:15Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"samba","fixed_in":["4.10.5-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.9.5+dfsg-5"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.9.5+dfsg-5"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.9.5+dfsg-5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"samba","fixed_in":["4.9.5+git.176.375e1f05788-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"samba","fixed_in":["4.9.5+git.176.375e1f05788-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"samba","fixed_in":["4.9.5+git.176.375e1f05788-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"samba","fixed_in":["4.9.5+git.176.375e1f05788-3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"samba","fixed_in":["4.9.5+git.176.375e1f05788-lp151.2.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.9.0"},{"fixed":"4.10.5-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-5"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.8-3.mga7"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:7","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-1.mga7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.176.375e1f05788-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Python 2 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.176.375e1f05788-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.176.375e1f05788-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.176.375e1f05788-3.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.5+git.176.375e1f05788-lp151.2.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6+git.182.2205d5224e3-1.1"}]}],"bundled":66}],"products":[{"vendor":"samba","product":"samba"}],"references":[{"url":"https://www.samba.org/samba/security/CVE-2019-12435.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://usn.ubuntu.com/4018-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/108825","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://www.synology.com/security/advisory/Synology_SA_19_27","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQ3LCJNJ3ONHIRKDSKOTT6QGXALLCHVG/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QSG3TLPZP35RH5DWAIDC7MHXRK5DFKOE/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00023.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12435"},{"url":"https://github.com/advisories/GHSA-8gjg-6f8w-gvhc"},{"url":"https://security.alpinelinux.org/vuln/CVE-2019-12435","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-12435","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0286.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24980","tags":["report"]},{"url":"https://www.samba.org/samba/history/samba-4.10.5.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.10.6.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.10.7.html","tags":["web"]},{"url":"https://www.samba.org/samba/history/samba-4.10.8.html","tags":["web"]},{"url":"https://www.samba.org/samba/security/CVE-2019-12436.html","tags":["advisory"]},{"url":"https://www.samba.org/samba/security/CVE-2019-10197.html","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191574-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1125601","tags":["report"]},{"url":"https://bugzilla.suse.com/1130245","tags":["report"]},{"url":"https://bugzilla.suse.com/1134452","tags":["report"]},{"url":"https://bugzilla.suse.com/1134697","tags":["report"]},{"url":"https://bugzilla.suse.com/1137815","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12435","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191574-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2019-12435","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4018-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-12435","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7DJVGAMH4MKQ5ZHFYUNWOXWJ3ITFRSMN/#7DJVGAMH4MKQ5ZHFYUNWOXWJ3ITFRSMN","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3824","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20277","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-12435","description":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.","status":"published","published":"2019-06-19T11:56:01Z","modified":"2024-08-04T23:17:40.283Z","updated_at":"2026-11-02T14:20:24.025419Z"}],"euvd":[{"id":"EUVD-2019-4045","description":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.","status":"published","published":"2019-06-19T11:56:01Z","modified":"2024-08-04T23:17:40Z","updated_at":"2026-11-03T02:40:45.973526Z"}],"ghsa":[{"id":"GHSA-8gjg-6f8w-gvhc","title":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to...","description":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.","status":"published","published":"2022-05-24T16:48:23Z","modified":"2023-01-28T05:05:55Z","updated_at":"2026-11-02T14:44:23.373796Z"}],"nvd":[{"id":"CVE-2019-12435","description":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.","status":"published","published":"2019-06-19T12:15:10.14Z","modified":"2026-06-17T02:14:39.23Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:05:17.695191Z"}],"osv":[{"id":"ALPINE-CVE-2019-12435","description":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.","status":"published","published":"2019-06-19T12:15:10.14Z","modified":"2026-09-21T06:17:52.464035769Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"CVE-2019-12435","description":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.","status":"published","published":"2019-06-19T12:15:10.14Z","modified":"2026-10-24T10:30:15.456593648Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:10.718934Z"},{"id":"DEBIAN-CVE-2019-12435","description":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.","status":"published","published":"2019-06-19T12:15:10.14Z","modified":"2026-09-21T07:02:01.186253327Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:31.467893Z"},{"id":"UBUNTU-CVE-2019-12435","description":"Samba 4.9.x before 4.9.9 and 4.10.x before 4.10.5 has a NULL pointer dereference, leading to Denial of Service. This is related to the AD DC DNS management server (dnsserver) RPC server process.","status":"withdrawn","published":"2019-06-19T00:00:00Z","modified":"2026-02-04T03:08:41.730253Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:19.202697Z"},{"id":"MGASA-2019-0286","title":"Updated samba packages fix security vulnerabilities","description":"Updated samba packages fix security vulnerabilities:\n\nA combination of parameters and permissions in smb.conf can allow user\nto escape from the share path definition (CVE-2019-10197).\n\nAn authenticated user can crash the Samba AD DC's RPC server process via\na NULL pointer dereference (CVE-2019-12435)\n\nAn user with read access to the directory can cause a NULL pointer\ndereference using the paged search control (CVE-2019-12436).\n\nFor other fixes in this update, see the referenced changelogs.\n","status":"published","published":"2019-09-21T16:04:55Z","modified":"2026-04-16T04:42:47.311637378Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1755-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).\n\nOther issues fixed:\n\n- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).\n- Add ceph_snapshots VFS module; (jsc#SES-183).\n- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).\n- MacOS credit accounting breaks with async SESSION SETUP;\n  (bsc#1125601); (bso#13796).\n- Mac OS X SMB2 implmenetation sees Input/output error or Resource\n  temporarily unavailable and drops connection; (bso#13698)\n- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-07-20T06:25:47Z","modified":"2026-02-04T04:29:35.236915Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:11365-1","title":"ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:49.07167Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:1574-1","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).\n\nOther issues fixed:\n\n- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).\n- Add ceph_snapshots VFS module; (jsc#SES-183).\n- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).\n- MacOS credit accounting breaks with async SESSION SETUP;\n  (bsc#1125601); (bso#13796).\n- Mac OS X SMB2 implmenetation sees Input/output error or Resource\n  temporarily unavailable and drops connection; (bso#13698)\n- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).\n","status":"published","published":"2019-06-19T23:16:48Z","modified":"2026-02-04T02:55:52.386641Z","updated_at":"2026-11-02T15:53:46.44301Z"},{"id":"SUSE-SU-2019:1574-2","title":"Security update for samba","description":"This update for samba fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2019-12435: zone operations can crash rpc server; (bso#13922); (bsc#1137815).\n\nOther issues fixed:\n\n- Fix cephwrap_flistxattr() debug message; (bso#13940); (bsc#1134697).\n- Add ceph_snapshots VFS module; (jsc#SES-183).\n- Fix vfs_ceph realpath; (bso#13918); (bsc#1134452).\n- MacOS credit accounting breaks with async SESSION SETUP;\n  (bsc#1125601); (bso#13796).\n- Mac OS X SMB2 implmenetation sees Input/output error or Resource\n  temporarily unavailable and drops connection; (bso#13698)\n- Explicitly enable libcephfs POSIX ACL support; (bso#13896); (bsc#1130245).\n","status":"published","published":"2019-06-24T09:29:54Z","modified":"2026-02-04T03:57:29.403172Z","updated_at":"2026-11-02T15:53:46.44301Z"}]}}