CVE-2019-14833: Medium severity samba vulnerability
A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-14833?
CVE-2019-14833 is a vulnerability found in Samba, affecting versions 4.5.0 to 4.9.15, 4.10.0 to 4.10.10, and 4.11.0 to 4.11.2.
How does CVE-2019-14833 impact Samba?
CVE-2019-14833 allows an attacker to change or set a new password for a Samba user, potentially compromising the security of the system.
What is the severity of CVE-2019-14833?
The severity of CVE-2019-14833 is medium, with a CVSS score of 5.4.
Which software versions are affected by CVE-2019-14833?
Versions 4.5.0 to 4.9.15, 4.10.0 to 4.10.10, and 4.11.0 to 4.11.2 of Samba are affected by CVE-2019-14833.
How can I fix CVE-2019-14833?
To fix CVE-2019-14833, update to a patched version of Samba (4.9.15, 4.10.10, or 4.11.2) or apply the necessary security updates provided by your operating system vendor.