ZeroHour

CVE-2019-10197

CVSS 3.0
9.1 critical
EPSS
3%p87
Published
()
Modified
Description

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.

Vendors
sambacanonicaldebian
Products
samba, ubuntu linux, debian linux
Weakness
CWE-22
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

In the news