CVE-2019-14833
Fixed in a distro release EPSS 2%CVSS 4.2
A flaw was found in Samba, all versions starting samba 4.5.0 before samba 4.9.15, samba 4.10.10, samba 4.11.2, in the way it handles a user password change or a new password for a samba user. The Samba Active Directory Domain Controller can be configured to use a custom script to check for password complexity. This configuration can fail to verify password complexity when non-ASCII characters are used in the password, which could lead to weak passwords being set for samba users, making it vulnerable to dictionary attacks.
Products: Samba
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | samba | 4.10.10-r0 |
| Alpine 3.11 | samba | 4.11.2-r0 |
| Alpine 3.12 | samba | 4.11.2-r0 |
| Alpine 3.13 | samba | 4.11.2-r0 |
| Alpine 3.14 | samba | 4.11.2-r0 |
| Alpine 3.15 | samba | 4.11.2-r0 |
| Alpine 3.16 | samba | 4.11.2-r0 |
| Alpine 3.17 | samba | 4.11.2-r0 |
| Alpine 3.18 | samba | 4.11.2-r0 |
| Alpine 3.19 | samba | 4.11.2-r0 |
| Alpine 3.20 | samba | 4.11.2-r0 |
| Alpine 3.21 | samba | 4.11.2-r0 |
| Alpine 3.22 | samba | 4.11.2-r0 |
| Alpine 3.23 | samba | 4.11.2-r0 |
| Alpine 3.24 | samba | 4.11.2-r0 |
| Alpine 3.8 | samba | 4.8.12-r1 |
| Alpine 3.9 | samba | 4.8.12-r1 |
| Debian 10 | samba | 2:4.9.5+dfsg-5+deb10u4 |
| Debian 12 | samba | 2:4.11.1+dfsg-2 |
| Debian 13 | samba | 2:4.11.1+dfsg-2 |
| Debian 14 | samba | 2:4.11.1+dfsg-2 |
| Debian 9 | samba | 2:4.5.16+dfsg-1+deb9u4 |
| SUSE Enterprise Storage 6 | samba | 4.9.5+git.210.ab0549acb05-3.14.1 |
| SUSE Linux Enterprise High Availability Extension 12 SP5 | samba | 4.10.17+git.203.862547088ca-3.14.1 |
| SUSE Linux Enterprise High Availability Extension 15 | samba | 4.7.11+git.186.d75219614c3-4.30.1 |
| SUSE Linux Enterprise High Availability Extension 15 SP1 | samba | 4.9.5+git.210.ab0549acb05-3.14.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | samba | 4.7.11+git.186.d75219614c3-4.30.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | samba | 4.9.5+git.210.ab0549acb05-3.14.1 |
| SUSE Linux Enterprise Module for Package Hub 15 | samba | 4.7.11+git.186.d75219614c3-4.30.1 |
| SUSE Linux Enterprise Module for Python 2 15 SP1 | samba | 4.9.5+git.210.ab0549acb05-3.14.1 |
| SUSE Linux Enterprise Server 12 SP5 | ldb | 1.5.8-3.5.1 |
| SUSE Linux Enterprise Server 12 SP5 | samba | 4.10.17+git.203.862547088ca-3.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | ldb | 1.5.8-3.5.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | samba | 4.10.17+git.203.862547088ca-3.14.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | ldb | 1.5.8-3.5.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | samba | 4.10.17+git.203.862547088ca-3.14.1 |
| Ubuntu 16.04 LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.23 |
| Ubuntu 18.04 LTS | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.13 |
| openSUSE Leap 15.0 | samba | 4.7.11+git.186.d75219614c3-lp150.3.18.2 |
| openSUSE Leap 15.1 | samba | 4.9.5+git.210.ab0549acb05-lp151.2.9.1 |
| openSUSE Tumbleweed | samba | 4.14.6+git.182.2205d5224e3-1.1 |