SB2019091743 - Fedora 31 update for libldb, libtalloc, libtevent, samba 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2019091743

SB2019091743 - Fedora 31 update for libldb, libtalloc, libtevent, samba

Published: September 17, 2019 Updated: April 25, 2025

Security Bulletin ID SB2019091743
Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Adjecent network
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2019-10197)

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to an error related to caching of responses when the 'wide links' option is explicitly set to 'yes' and either 'unix extensions = no' or 'allow insecure wide links = yes' is set in addition. A remote attacker can that does not have access to a share can send a series of request to an SMB share and gain access to the global root directory on the system.

Successful exploitation of the vulnerability may allow an attacker to read or modify arbitrary files on the system. Note, that unix permissions enforced by kernel will still apply.


Remediation

Install update from vendor's website.

References