Detections
Analytics
CVE-2019-10197
critical
Description
A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.
References
https://www.debian.org/security/2019/dsa-4513
https://usn.ubuntu.com/4121-1/
https://security.netapp.com/advisory/ntap-20190903-0001/
https://security.gentoo.org/glsa/202003-52
https://seclists.org/bugtraq/2019/Sep/4
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10197
https://access.redhat.com/errata/RHSA-2019:4023
https://access.redhat.com/errata/RHSA-2019:3253
http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00045.html