Description
Samba 4.10.x before 4.10.5 has a NULL pointer dereference, leading to an AD DC LDAP server Denial of Service. This is related to an attacker using the paged search control. The attacker must have directory read access in order to attempt an exploit.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | samba | 4.14.6+git.182.2205d5224e3-1.1 | openSUSE-SU-2024:11365-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | samba | 4.10.5-r0 | — |
| Alpine v3.23 | samba | 4.10.5-r0 | — |
| Alpine v3.22 | samba | 4.10.5-r0 | — |
| Alpine v3.21 | samba | 4.10.5-r0 | — |
| Alpine v3.20 | samba | 4.10.5-r0 | — |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | samba | 4.10.5-r0 | — |
| Alpine v3.18 | samba | 4.10.5-r0 | — |
| Alpine v3.17 | samba | 4.10.5-r0 | — |
| Alpine v3.16 | samba | 4.10.5-r0 | — |
| Alpine v3.15 | samba | 4.10.5-r0 | — |
| Alpine v3.14 | samba | 4.10.5-r0 | — |
| Alpine v3.13 | samba | 4.10.5-r0 | — |
| Alpine v3.12 | samba | 4.10.5-r0 | — |
| Alpine v3.11 | samba | 4.10.5-r0 | — |
| Alpine v3.10 | samba | 4.10.5-r0 | — |
Advisories 1
- openSUSE-SU-2024:11365-1 ctdb-4.14.6+git.182.2205d5224e3-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://www.samba.org/samba/security/CVE-2019-12436.html
- USN-4018-1 vendor-advisory
- 108823 vdb-entry
- https://www.synology.com/security/advisory/Synology_SA_19_27
- FEDORA-2019-8015e5dc40 vendor-advisory