CVE-2019-14907: Medium severity Samba Samba vulnerability
All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
Other sources
As per upstream advisory:
If samba is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange.
In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-14907?
CVE-2019-14907 is a vulnerability in all Samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12, and 4.11.x before 4.11.5.
What is the severity of CVE-2019-14907?
The severity of CVE-2019-14907 is medium, with a CVSS score of 6.5.
Which software versions are affected by CVE-2019-14907?
CVE-2019-14907 affects all Samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12, and 4.11.x before 4.11.5.
How can I fix CVE-2019-14907?
To fix CVE-2019-14907, update to Samba versions 4.9.18, 4.10.12, or 4.11.5.
Where can I find more information about CVE-2019-14907?
You can find more information about CVE-2019-14907 in the following references: http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00055.html, https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14907, https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html