{"id":"CVE-2019-3824","aliases":["CLSA-2026-1779959962","DEBIAN-CVE-2019-3824","DLA-1699-1","DSA-4397-1","EUVD-2019-13447","GHSA-6r53-4gh8-g2xq","MGASA-2019-0152","SUSE-SU-2019:0639-1","UBUNTU-CVE-2019-3824","USN-3895-1","openSUSE-SU-2019:1163-1","openSUSE-SU-2024:10911-1","openSUSE-SU-2024:11365-1"],"status":"published","title":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process...","description":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02844,"percentile":0.868,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2019-02-25T07:00:00Z","modified":"2026-10-26T09:43:53Z","fixes":[{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:4.9.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:4.9.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:4.9.5+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"ldb","fixed_in":["2:1.1.20-0+deb8u2"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"ldb","fixed_in":["2:1.1.27-1+deb9u1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"ldb","fixed_in":["1.2.3-3.8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"ldb","fixed_in":["1:1.1.24-0ubuntu0.14.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ldb","fixed_in":["2:1.1.24-1ubuntu3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ldb","fixed_in":["2:1.2.3-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.0","package":"ldb","fixed_in":["1.2.3-lp150.7.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libsmbclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libsmbclient-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-domainjoin-gui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-glusterfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-swat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-winbind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-winbind-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-winbind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"samba-winbind-krb5-locator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.23-53.0.1.el6_10.tuxcare.ol.els6"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.9.5+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.1.20-0+deb8u2"}]}],"versions":["2:1.1.17-2","2:1.1.17-2+deb8u1","2:1.1.20-0+deb8u1"]},{"source":"osv","ecosystem":"Debian:9","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.1.27-1+deb9u1"}]}],"versions":["2:1.1.27-1"]},{"source":"osv","ecosystem":"Mageia:6","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.12-1.2.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"sssd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13.4-9.5.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-3.8.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.24-0ubuntu0.14.04.2"}]}],"versions":["1:1.1.15-1.1","1:1.1.16-1","1:1.1.16-1ubuntu0.1","1:1.1.24-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.1.24-1ubuntu3.1"}]}],"versions":["2:1.1.20-2","2:1.1.21-1","2:1.1.23-1","2:1.1.23-1ubuntu1","2:1.1.24-1ubuntu1","2:1.1.24-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1ubuntu0.1"}]}],"versions":["2:1.1.29-2","2:1.2.2-2","2:1.2.3-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.1.24-0ubuntu0.14.04.2"}]}],"versions":["1:1.1.15-1.1","1:1.1.16-1","1:1.1.16-1ubuntu0.1","1:1.1.24-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.1.24-1ubuntu3.1"}]}],"versions":["2:1.1.20-2","2:1.1.21-1","2:1.1.23-1","2:1.1.23-1ubuntu1","2:1.1.24-1ubuntu1","2:1.1.24-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:1.2.3-1ubuntu0.1"}]}],"versions":["2:1.1.29-2","2:1.2.2-2","2:1.2.3-1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.3-lp150.7.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ldb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-1.3"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.6+git.182.2205d5224e3-1.1"}]}],"bundled":66}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"samba","product":"samba"}],"references":[{"url":"https://lists.debian.org/debian-lts-announce/2019/03/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2019/dsa-4397","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=13773","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://usn.ubuntu.com/3895-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securityfocus.com/bid/107347","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20190226-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3824","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00035.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3824"},{"url":"https://github.com/advisories/GHSA-6r53-4gh8-g2xq"},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1779959962.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-3824","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2019-0152.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=24478","tags":["report"]},{"url":"http://lists.suse.com/pipermail/sle-security-updates/2019-March/005173.html","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2019-03/msg00075.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190639-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1125410","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3824","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-3824","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3895-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-3824","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QWGPS53CCTBYVEPAUZXB34W5UCXHGDXD/#QWGPS53CCTBYVEPAUZXB34W5UCXHGDXD","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1140","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10700","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20277","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1059","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3403","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-0452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-2447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-4572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5398","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-6015","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-3789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0022","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2123","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-11103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1057","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16851","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16852","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16853","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10218","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14847","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14907","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-19344","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3880","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10704","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10760","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-14383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20254","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2019-3824","description":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.","status":"published","published":"2019-03-06T15:00:00Z","modified":"2024-08-04T19:19:18.6Z","updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13447","description":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.","status":"published","published":"2019-03-06T15:00:00Z","modified":"2024-08-04T19:19:18Z","updated_at":"2026-11-03T03:06:54.939848Z"}],"ghsa":[{"id":"GHSA-6r53-4gh8-g2xq","title":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process...","description":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.","status":"published","published":"2022-05-13T01:22:27Z","modified":"2023-02-01T05:06:32Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:50:22.333418Z"}],"nvd":[{"id":"CVE-2019-3824","description":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.","status":"published","published":"2019-03-06T15:29:00.237Z","modified":"2026-06-17T02:35:39.97Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:07.268578Z"}],"osv":[{"id":"CVE-2019-3824","description":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.","status":"published","published":"2019-03-06T15:29:00.237Z","modified":"2026-10-24T10:31:00.988783005Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:12.363788Z"},{"id":"DEBIAN-CVE-2019-3824","description":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.","status":"published","published":"2019-03-06T15:29:00.237Z","modified":"2026-09-21T07:01:20.038759107Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.221385Z"},{"id":"UBUNTU-CVE-2019-3824","description":"A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.","status":"published","published":"2019-02-25T07:00:00Z","modified":"2026-04-22T11:57:56.917201Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:21.213407Z"},{"id":"CLSA-2026-1779959962","title":"samba: Fix of 4 CVEs","description":"- CVE-2019-3880: Refuse winreg SaveKey/RestoreKey RPCs to prevent writing\n  registry hive files outside intended share boundaries via symlink races\n- CVE-2019-10218: Reject server-supplied filenames containing path\n  separators in SMB1 directory listings to protect libsmbclient consumers\n  from path traversal attacks\n- CVE-2018-1050: Already fixed - upstream patch 0207 applied since the\n  initial import\n- CVE-2019-3824: Not affected - the vulnerable ldb_tdb / AD DC code lives\n  in source4, which is not built by this spec (samba_source = source3)","status":"published","published":"2026-05-28T09:19:27Z","modified":"2026-10-26T09:43:53.491107185Z","updated_at":"2026-11-02T15:43:45.090939Z"},{"id":"DLA-1699-1","title":"ldb - security update","status":"published","published":"2019-03-01T00:00:00Z","modified":"2026-03-09T01:19:49.624946Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4397-1","title":"ldb - security update","status":"published","published":"2019-02-28T00:00:00Z","modified":"2026-03-09T02:10:21.100549Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0152","title":"Updated ldb packages fix security vulnerability","description":"Garming Sam reported an out-of-bounds read in the ldb_wildcard_compare()\nfunction of ldb, resulting in denial of service (CVE-2019-3824).\n\nThe ldb package has been updated to version 1.2.4 to fix this issue.\nThe sssd and samba packages have been rebuilt against the updated ldb.\n\nIf a user was configured with no home directory set, sssd would return '/'\n(the root directory) instead of '' (the empty string / no home directory).\nThis could impact services that restrict the user's filesystem access to\nwithin their home directory through chroot() etc. All versions before 2.1\nare vulnerable. (CVE-2019-3811)\n","status":"published","published":"2019-05-07T21:38:09Z","modified":"2026-04-16T04:43:04.209261296Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2019:1163-1","title":"Security update for ldb","description":"This update for ldb fixes the following issue:\n\nSecurity issue fixed:\n\n- CVE-2019-3824: Fixed an out-of-bound read vulnerability in ldb_wildcard_compare (bsc#1125410).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-04-05T10:09:40Z","modified":"2026-02-04T02:56:41.109343Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2024:10911-1","title":"ldb-tools-2.3.0-1.3 on GA media","description":"These are all security issues fixed in the ldb-tools-2.3.0-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:37:22.096351Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11365-1","title":"ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.14.6+git.182.2205d5224e3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:12:49.07167Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2019:0639-1","title":"Security update for ldb","description":"This update for ldb fixes the following issue:\n\nSecurity issue fixed:\n\n- CVE-2019-3824: Fixed an out-of-bound read vulnerability in ldb_wildcard_compare (bsc#1125410).\n","status":"published","published":"2019-03-19T12:06:26Z","modified":"2026-02-04T03:53:39.566068Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3895-1","title":"ldb vulnerability","description":"It was discovered that LDB incorrectly handled certain search expressions.\nA remote attacker could possibly use this issue to cause the Samba LDAP\nprocess to crash, resulting in a denial of service.\n","status":"published","published":"2019-02-26T14:26:20Z","modified":"2026-04-22T09:54:14.458621Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}