MGASA-2019-0286: ldb Mageia
Vulnerability summary
MGASA-2019-0286 is a vulnerability in ldb Mageia with no CVSS score yet.
Advisory lineage
Upstream 3 · Downstream 0Timeline
- 21-09-2019PublishedVulnerability first disclosed.
- 16-04-2026Last modifiedVulnerability information updated.
Description
Updated samba packages fix security vulnerabilities Updated samba packages fix security vulnerabilities: A combination of parameters and permissions in smb.conf can allow user to escape from the share path definition (CVE-2019-10197). An authenticated user can crash the Samba AD DC's RPC server process via a NULL pointer dereference (CVE-2019-12435) An user with read access to the directory can cause a NULL pointer dereference using the paged search control (CVE-2019-12436). For other fixes in this update, see the referenced changelogs.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Mageia2 products
- ldb< 1.5.5-1.mga7
- samba< 4.10.8-3.mga7
1 vendor · 2 products