# CVE-2019-10218: ctdb: Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet Fil...

CVE-2019-10218 is fixed in 36 products on 1 platform, first by ctdb 2:4.7.6+dfsg~ubuntu-0ubuntu2.13, released October 28, 2019. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2019-10218
- Priority: Routine
- CVSS: 6.5 (Moderate)
- EPSS: 0.0338
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 28, 2019

## Description

Samba is an open-source implementation of the Server Message Block (SMB) protocol and the related Common Internet File System (CIFS) protocol, which allow PC-compatible machines to share files, printers, and various information.  The following packages have been upgraded to a later upstream version: samba (4.11.2). (BZ#1754409)  Security Fix(es):  * samba: Combination of parameters and permissions can allow user to escape from the share path definition (CVE-2019-10197)  * samba: smb client vulnerable to filenames containing path separators (CVE-2019-10218)  * samba: Crash after failed character conversion at log level 3 or above (CVE-2019-14907)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | ctdb RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | ctdb Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [ctdb 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-ctdb-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | ctdb ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | ctdb-tests RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | ctdb-tests ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | libnss-winbind Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [libnss-winbind 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libnss-winbind-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | libpam-winbind Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [libpam-winbind 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpam-winbind-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | libparse-pidl-perl Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [libparse-pidl-perl 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libparse-pidl-perl-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | libsmbclient RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | libsmbclient Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [libsmbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libsmbclient-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | libsmbclient ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | libsmbclient-devel RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | libsmbclient-devel ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | libwbclient RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | libwbclient ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | libwbclient-devel RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | libwbclient-devel ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | libwbclient0 Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [libwbclient0 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libwbclient0-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | openchange RHEL 8 | 0:2.3-24.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | openchange ol 8 | 0:2.3-24.0.1.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | python-samba Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [python-samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-samba-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | python3-samba RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | python3-samba ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | python3-samba-test RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | python3-samba-test ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | registry-tools Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [registry-tools 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-registry-tools-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | samba RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-samba-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | samba ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-client RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-client ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-client-libs RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-client-libs ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-common RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-common Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [samba-common 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-samba-common-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | samba-common ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-common-bin Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [samba-common-bin 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-samba-common-bin-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | samba-common-libs RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-common-libs ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-common-tools RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-common-tools ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-dsdb-modules Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [samba-dsdb-modules 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-samba-dsdb-modules-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | samba-krb5-printing RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-krb5-printing ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-libs RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-libs Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [samba-libs 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-samba-libs-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | samba-libs ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-pidl RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-pidl ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-test RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-test ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-test-libs RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-test-libs ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-testsuite Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [samba-testsuite 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-samba-testsuite-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | samba-vfs-modules Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [samba-vfs-modules 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-samba-vfs-modules-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | samba-winbind RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-winbind ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-winbind-clients RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-winbind-clients ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-winbind-krb5-locator RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-winbind-krb5-locator ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | samba-winbind-modules RHEL 8 | 0:4.11.2-13.el8 | [RHSA-2020:1878](https://patchblox.com/security/data/fix/linux/rhsa-2020-1878.md) | Apr 28, 2020 |
| Linux | samba-winbind-modules ol 8 | 0:4.11.2-13.el8 | [ELSA-2020-1878](https://patchblox.com/security/data/fix/linux/elsa-2020-1878.md) | May 5, 2020 |
| Linux | smbclient Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [smbclient 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-smbclient-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |
| Linux | winbind Ubuntu 18.04.6 LTS (bionic) | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 | [winbind 2:4.7.6+dfsg~ubuntu-0ubuntu2.13](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-winbind-2-4.7.6-dfsg-ubuntu-0ubuntu2.13.md) | Oct 28, 2019 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
