Incorrect Default Permissions Affecting samba package, versions <2:4.3.11+dfsg-0ubuntu0.16.04.24


Severity

Recommended
0.0
medium
0
10

Based on Ubuntu security rating.

Threat Intelligence

EPSS
1.73% (88th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Incorrect Default Permissions vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-UBUNTU1604-SAMBA-537065
  • published10 Dec 2019
  • disclosed10 Dec 2019

Introduced: 10 Dec 2019

CVE-2019-14861  (opens in a new tab)
CWE-276  (opens in a new tab)

How to fix?

Upgrade Ubuntu:16.04 samba to version 2:4.3.11+dfsg-0ubuntu0.16.04.24 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream samba package and not the samba package as distributed by Ubuntu. See How to fix? for Ubuntu:16.04 relevant fixed versions and status.

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly named) dnsserver RPC pipe provides administrative facilities to modify DNS records and zones. Samba, when acting as an AD DC, stores DNS records in LDAP. In AD, the default permissions on the DNS partition allow creation of new records by authenticated users. This is used for example to allow machines to self-register in DNS. If a DNS record was created that case-insensitively matched the name of the zone, the ldb_qsort() and dns_name_compare() routines could be confused into reading memory prior to the list of DNS entries when responding to DnssrvEnumRecords() or DnssrvEnumRecords2() and so following invalid memory as a pointer.

CVSS Scores

version 3.1