CVE-2019-14861: canonical ubuntu_linux Incorrect Default Permissions
Vulnerability summary
CVE-2019-14861 is a medium (CVSS 5.3) Incorrect Default Permissions vulnerability in canonical ubuntu_linux. EPSS estimates a 2.30% chance of exploitation in the next 30 days, higher than 83.3% of scored vulnerabilities.
Not severe (CVSS 5.3, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 9 · Related 7Timeline
- 10-12-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.
CVSS metrics
8 scores · 5 sources · 3 versions- OSV · AlpineEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.3MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- NVDNIST5.3MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated5.3MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.30%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
No change 0.00 pp
From 2.30% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Debian2 products
- samba< 2:4.11.3+dfsg-1
- debian_linuxEOL9.0
Alpine1 product
- samba≥ 4.0.0, < 4.10.11-r0 | ≥ 4.0.0, < 4.11.3-r0
Canonical1 product
- ubuntu_linuxEOL14.04 | 16.04 | 18.04 | 19.04 | 19.10
Fedoraproject1 product
- fedoraEOL30 | 31
Opensuse1 product
- leapEOL15.1
Red hat1 product
- sambaall versions 4.11.x before 4.11.3 | all versions 4.10.x before 4.10.11 | all versions 4.x.x before 4.9.17
Samba1 product
- samba≥ 4.0.0, < 4.9.17 | ≥ 4.10.0, < 4.10.11 | ≥ 4.11.0, < 4.11.3
Ubuntu1 product
- samba< 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4 | < 2:4.3.11+dfsg-0ubuntu0.16.04.24 | < 2:4.7.6+dfsg~ubuntu-0ubuntu2.14
8 vendors · 9 products
References
18 links- lists.fedoraproject.org/archives/…Vendor Advisory
- lists.opensuse.org/opensuse-security-announce/2019-12/msg00038.htmlVendor AdvisoryMailing ListThird Party Advisory
- lists.fedoraproject.org/archives/…Vendor Advisory
- security.netapp.com/advisory/ntap-20191210-0002/Third Party Advisory
- www.synology.com/security/advisory/Synology_SA_19_40Third Party Advisory
Show all 18 references
- www.openwall.com/lists/oss-security/2024/06/24/3Mailing List