CVE-2019-14907

ctdb: All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.xbefore 4.11.5 have an issue where if it is se...

CVE-2019-14907 is fixed in 45 products on 1 platform, first by ctdb 2:4.7.6+dfsg~ubuntu-0ubuntu2.15, released January 20, 2020. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
6.5
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0315
88th percentile

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.xbefore 4.11.5 have an issue where if it is set with "log level = 3" (orabove) then the string obtained from the client, after a failed characterconversion, is printed. Such strings can be provided during the NTLMSSPauthentication exchange. In the Samba AD DC in particular, this may cause along-lived process(such as the RPC server) to terminate. (In the fileserver case, the most likely target, smbd, operates as process-per-clientand so a crash there is harmless).

Where it's fixed

ProductFixed inFixReleased
Linux
ctdb · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
ctdb · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 ctdb 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
ctdb · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 ctdb 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
ctdb · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 ctdb 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
ctdb · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 ctdb 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
ctdb · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
ctdb-tests · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
ctdb-tests · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
ldb-tools · Ubuntu 24.10 (oracular) 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 ldb-tools 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 Oct 10, 2023
ldb-tools · Ubuntu 25.04 (plucky) 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 ldb-tools 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libldb2 · Ubuntu 24.10 (oracular) 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 libldb2 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libldb2 · Ubuntu 25.04 (plucky) 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 libldb2 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libnss-winbind · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 libnss-winbind 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
libnss-winbind · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 libnss-winbind 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
libnss-winbind · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 libnss-winbind 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libnss-winbind · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 libnss-winbind 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libpam-winbind · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 libpam-winbind 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
libpam-winbind · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 libpam-winbind 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
libpam-winbind · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 libpam-winbind 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libpam-winbind · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 libpam-winbind 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libparse-pidl-perl · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 libparse-pidl-perl 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
libsmbclient · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
libsmbclient · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 libsmbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
libsmbclient · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 libsmbclient 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
libsmbclient · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
libsmbclient-devel · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
libsmbclient-devel · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
libsmbclient0 · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 libsmbclient0 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libsmbclient0 · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 libsmbclient0 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
libwbclient · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
libwbclient · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
libwbclient-devel · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
libwbclient-devel · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
libwbclient0 · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 libwbclient0 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
libwbclient0 · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 libwbclient0 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
libwbclient0 · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 libwbclient0 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
libwbclient0 · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 libwbclient0 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
openchange · RHEL 8 0:2.3-24.el8 RHSA-2020:1878 Apr 28, 2020
openchange · ol 8 0:2.3-24.0.1.el8 ELSA-2020-1878 May 5, 2020
python-samba · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 python-samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
python3-ldb · Ubuntu 24.10 (oracular) 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 python3-ldb 2:2.8.0+samba4.19.5+dfsg-4ubuntu9 Oct 10, 2023
python3-ldb · Ubuntu 25.04 (plucky) 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 python3-ldb 2:2.9.1+samba4.20.4+dfsg-1ubuntu1 Oct 10, 2023
python3-samba · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
python3-samba · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 python3-samba 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
python3-samba · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 python3-samba 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
python3-samba · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 python3-samba 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
python3-samba · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
python3-samba-test · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
python3-samba-test · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
registry-tools · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 registry-tools 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
registry-tools · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 registry-tools 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
registry-tools · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 registry-tools 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
registry-tools · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 registry-tools 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
samba · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 samba 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
samba · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-ad-dc · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-ad-dc 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-ad-dc · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-ad-dc 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-ad-provision · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-ad-provision 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-ad-provision · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-ad-provision 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-client · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-client · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-client-libs · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-client-libs · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-common · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-common · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 samba-common 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
samba-common · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 samba-common 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
samba-common · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-common 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-common · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-common 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-common · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-common-bin · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 samba-common-bin 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
samba-common-bin · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 samba-common-bin 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
samba-common-bin · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-common-bin 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-common-bin · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-common-bin 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-common-libs · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-common-libs · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-common-tools · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-common-tools · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-dsdb-modules · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 samba-dsdb-modules 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
samba-dsdb-modules · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 samba-dsdb-modules 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
samba-dsdb-modules · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-dsdb-modules 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-dsdb-modules · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-dsdb-modules 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-krb5-printing · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-krb5-printing · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-libs · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-libs · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 samba-libs 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
samba-libs · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 samba-libs 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
samba-libs · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-libs 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-libs · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-libs 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-libs · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-pidl · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-pidl · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-test · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-test · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-test-libs · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-test-libs · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-testsuite · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 samba-testsuite 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
samba-testsuite · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 samba-testsuite 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
samba-testsuite · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-testsuite 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-testsuite · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-testsuite 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-vfs-ceph · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-vfs-ceph 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-vfs-glusterfs · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-vfs-glusterfs 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-vfs-modules · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 samba-vfs-modules 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
samba-vfs-modules · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 samba-vfs-modules 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
samba-vfs-modules · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-vfs-modules 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-vfs-modules · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-vfs-modules 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-vfs-modules-extra · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 samba-vfs-modules-extra 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
samba-vfs-modules-extra · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 samba-vfs-modules-extra 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
samba-winbind · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-winbind · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-winbind-clients · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-winbind-clients · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-winbind-krb5-locator · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-winbind-krb5-locator · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
samba-winbind-modules · RHEL 8 0:4.11.2-13.el8 RHSA-2020:1878 Apr 28, 2020
samba-winbind-modules · ol 8 0:4.11.2-13.el8 ELSA-2020-1878 May 5, 2020
smbclient · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 smbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
smbclient · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 smbclient 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
smbclient · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 smbclient 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
smbclient · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 smbclient 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023
winbind · Ubuntu 18.04.6 LTS (bionic) 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 winbind 2:4.7.6+dfsg~ubuntu-0ubuntu2.15 Jan 20, 2020
winbind · Ubuntu 20.04 LTS (focal) 2:4.11.5+dfsg-1ubuntu1 winbind 2:4.11.5+dfsg-1ubuntu1 Jan 20, 2020
winbind · Ubuntu 24.10 (oracular) 2:4.19.5+dfsg-4ubuntu9 winbind 2:4.19.5+dfsg-4ubuntu9 Oct 10, 2023
winbind · Ubuntu 25.04 (plucky) 2:4.20.4+dfsg-1ubuntu1 winbind 2:4.20.4+dfsg-1ubuntu1 Oct 10, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.