Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-14907

All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after a failed character conversion, is printed. Such strings can be provided during the NTLMSSP authentication exchange. In the Samba AD DC in particular, this may cause a long-lived process(such as the RPC server) to terminate. (In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.059
EPSS Ranking 90.1%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 2.6
References
Products affected by CVE-2019-14907
  • Redhat » Storage » Version: 3.0
    cpe:2.3:a:redhat:storage:3.0
  • Samba » Samba » Version: 4.10.0
    cpe:2.3:a:samba:samba:4.10.0
  • Samba » Samba » Version: 4.10.1
    cpe:2.3:a:samba:samba:4.10.1
  • Samba » Samba » Version: 4.10.10
    cpe:2.3:a:samba:samba:4.10.10
  • Samba » Samba » Version: 4.10.11
    cpe:2.3:a:samba:samba:4.10.11
  • Samba » Samba » Version: 4.10.2
    cpe:2.3:a:samba:samba:4.10.2
  • Samba » Samba » Version: 4.10.3
    cpe:2.3:a:samba:samba:4.10.3
  • Samba » Samba » Version: 4.10.4
    cpe:2.3:a:samba:samba:4.10.4
  • Samba » Samba » Version: 4.10.5
    cpe:2.3:a:samba:samba:4.10.5
  • Samba » Samba » Version: 4.10.8
    cpe:2.3:a:samba:samba:4.10.8
  • Samba » Samba » Version: 4.10.9
    cpe:2.3:a:samba:samba:4.10.9
  • Samba » Samba » Version: 4.11.0
    cpe:2.3:a:samba:samba:4.11.0
  • Samba » Samba » Version: 4.11.1
    cpe:2.3:a:samba:samba:4.11.1
  • Samba » Samba » Version: 4.11.2
    cpe:2.3:a:samba:samba:4.11.2
  • Samba » Samba » Version: 4.11.3
    cpe:2.3:a:samba:samba:4.11.3
  • Samba » Samba » Version: 4.11.4
    cpe:2.3:a:samba:samba:4.11.4
  • Samba » Samba » Version: 4.9.0
    cpe:2.3:a:samba:samba:4.9.0
  • Samba » Samba » Version: 4.9.1
    cpe:2.3:a:samba:samba:4.9.1
  • Samba » Samba » Version: 4.9.10
    cpe:2.3:a:samba:samba:4.9.10
  • Samba » Samba » Version: 4.9.11
    cpe:2.3:a:samba:samba:4.9.11
  • Samba » Samba » Version: 4.9.12
    cpe:2.3:a:samba:samba:4.9.12
  • Samba » Samba » Version: 4.9.13
    cpe:2.3:a:samba:samba:4.9.13
  • Samba » Samba » Version: 4.9.14
    cpe:2.3:a:samba:samba:4.9.14
  • Samba » Samba » Version: 4.9.15
    cpe:2.3:a:samba:samba:4.9.15
  • Samba » Samba » Version: 4.9.17
    cpe:2.3:a:samba:samba:4.9.17
  • Samba » Samba » Version: 4.9.2
    cpe:2.3:a:samba:samba:4.9.2
  • Samba » Samba » Version: 4.9.3
    cpe:2.3:a:samba:samba:4.9.3
  • Samba » Samba » Version: 4.9.4
    cpe:2.3:a:samba:samba:4.9.4
  • Samba » Samba » Version: 4.9.5
    cpe:2.3:a:samba:samba:4.9.5
  • Samba » Samba » Version: 4.9.6
    cpe:2.3:a:samba:samba:4.9.6
  • Samba » Samba » Version: 4.9.7
    cpe:2.3:a:samba:samba:4.9.7
  • Samba » Samba » Version: 4.9.8
    cpe:2.3:a:samba:samba:4.9.8
  • Samba » Samba » Version: 4.9.9
    cpe:2.3:a:samba:samba:4.9.9
  • Synology » Directory Server » Version: N/A
    cpe:2.3:a:synology:directory_server:-
  • Synology » Router Manager » Version: 1.2
    cpe:2.3:a:synology:router_manager:1.2
  • Synology » Skynas » Version: N/A
    cpe:2.3:a:synology:skynas:-
  • Canonical » Ubuntu Linux » Version: 16.04
    cpe:2.3:o:canonical:ubuntu_linux:16.04
  • Canonical » Ubuntu Linux » Version: 18.04
    cpe:2.3:o:canonical:ubuntu_linux:18.04
  • Canonical » Ubuntu Linux » Version: 19.04
    cpe:2.3:o:canonical:ubuntu_linux:19.04
  • Canonical » Ubuntu Linux » Version: 19.10
    cpe:2.3:o:canonical:ubuntu_linux:19.10
  • Debian » Debian Linux » Version: 9.0
    cpe:2.3:o:debian:debian_linux:9.0
  • Fedoraproject » Fedora » Version: 30
    cpe:2.3:o:fedoraproject:fedora:30
  • Fedoraproject » Fedora » Version: 31
    cpe:2.3:o:fedoraproject:fedora:31
  • Redhat » Enterprise Linux » Version: 7.0
    cpe:2.3:o:redhat:enterprise_linux:7.0
  • Redhat » Enterprise Linux » Version: 8.0
    cpe:2.3:o:redhat:enterprise_linux:8.0
  • Synology » Diskstation Manager » Version: 6.2
    cpe:2.3:o:synology:diskstation_manager:6.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved