This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2019-14902 →
DEBIAN-CVE-2019-14902
There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, whe...
Original description
The description as published by the source.
There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
samba
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.11.5+dfsg-1"}]}]
Debian:13
samba
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.11.5+dfsg-1"}]}]
Debian:14
samba
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.11.5+dfsg-1"}]}]
References
- advisory security-tracker.debian.org