This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2019-14847 →
DEBIAN-CVE-2019-14847
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in...
Original description
The description as published by the source.
A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
samba
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.11.0+dfsg-6"}]}]
Debian:13
samba
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.11.0+dfsg-6"}]}]
Debian:14
samba
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.11.0+dfsg-6"}]}]
References
- advisory security-tracker.debian.org