A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.10. An authenticated user, having read permissions on the LDAP server, could use this flaw to cause denial of service.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://lists.debian.org/debian-lts-announce/2019/03/msg00000.html | third party advisory mailing list |
| https://www.debian.org/security/2019/dsa-4397 | third party advisory vendor advisory |
| https://bugzilla.samba.org/show_bug.cgi?id=13773 | patch vendor advisory issue tracking |
| https://usn.ubuntu.com/3895-1/ | third party advisory vendor advisory |
| http://www.securityfocus.com/bid/107347 | third party advisory vdb entry |
| https://security.netapp.com/advisory/ntap-20190226-0001/ | third party advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3824 | patch third party advisory issue tracking |
| http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00035.html | vendor advisory |