{"id":"CVE-2019-10197","details":"A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.","modified":"2026-07-08T05:53:22.160878245Z","published":"2019-09-03T15:15:11.223Z","related":["SUSE-SU-2020:2673-1","openSUSE-SU-2019:2142-1","openSUSE-SU-2024:11365-1"],"database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"19.04"},{"last_affected":"19.04"}],"source":"CPE_STRING","vendor_product":"canonical:ubuntu_linux","cpes":["cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*"]},{"vendor_product":"debian:debian_linux","cpes":["cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"10.0"},{"last_affected":"10.0"}],"source":"CPE_STRING"}]},"references":[{"type":"WEB","url":"http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00045.html"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56ZUXHGDHPM7S6RVAKULZT5EATS37OKA/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M7NYIUZOCIDXWXGWMZ7O5Z7OJ6IX7EAB/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6EEKFT24DQI4DMZMSQTLMNZWG4RMZ57/"},{"type":"WEB","url":"https://support.f5.com/csp/article/K69511801"},{"type":"WEB","url":"https://support.f5.com/csp/article/K69511801?utm_source=f5support&amp%3Butm_medium=RSS"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:3253"},{"type":"ADVISORY","url":"https://access.redhat.com/errata/RHSA-2019:4023"},{"type":"ADVISORY","url":"https://seclists.org/bugtraq/2019/Sep/4"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202003-52"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190903-0001/"},{"type":"ADVISORY","url":"https://usn.ubuntu.com/4121-1/"},{"type":"ADVISORY","url":"https://www.debian.org/security/2019/dsa-4513"},{"type":"ADVISORY","url":"https://www.samba.org/samba/security/CVE-2019-10197.html"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10197"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/samba-team/samba","events":[{"introduced":"4fc4ae2924aaa2fc184b7385069274526fa8a4c2"},{"last_affected":"1acf30ac5c1c1ffc6f92ff9786b1be897c3b5092"},{"introduced":"25f2fe02a615e2cf906b6fa495acd8ea0aa9998a"},{"last_affected":"2d587a11d5f48a012d06df3c614283013ccf728c"},{"introduced":"7bc8b7f30d35929eb6e84686fdf4abe79e9ac19d"},{"last_affected":"c1d9e02d06a158f637475ffeca7a6c3f2fb1d773"}],"database_specific":{"extracted_events":[{"introduced":"4.9.0"},{"last_affected":"4.9.13"},{"introduced":"4.10.0"},{"last_affected":"4.10.8"},{"introduced":"4.9.0-rc1"},{"last_affected":"4.9.0-rc1"},{"introduced":"4.9.0-rc2"},{"last_affected":"4.9.0-rc2"},{"introduced":"4.9.0-rc3"},{"last_affected":"4.9.0-rc3"},{"introduced":"4.9.0-rc4"},{"last_affected":"4.9.0-rc4"},{"introduced":"4.9.0-rc5"},{"last_affected":"4.9.0-rc5"},{"introduced":"4.10.0-rc1"},{"last_affected":"4.10.0-rc1"},{"introduced":"4.10.0-rc2"},{"last_affected":"4.10.0-rc2"},{"introduced":"4.10.0-rc3"},{"last_affected":"4.10.0-rc3"},{"introduced":"4.10.0-rc4"},{"last_affected":"4.10.0-rc4"},{"introduced":"4.11.0"},{"last_affected":"4.11.0"},{"introduced":"4.11.0-rc1"},{"last_affected":"4.11.0-rc1"},{"introduced":"4.11.0-rc2"},{"last_affected":"4.11.0-rc2"},{"introduced":"4.11.0-rc3"},{"last_affected":"4.11.0-rc3"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.9.0:rc1:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.9.0:rc2:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.9.0:rc3:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.9.0:rc4:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.9.0:rc5:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.10.0:rc1:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.10.0:rc2:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.10.0:rc3:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.10.0:rc4:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.11.0:*:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.11.0:rc1:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.11.0:rc2:*:*:*:*:*:*","cpe:2.3:a:samba:samba:4.11.0:rc3:*:*:*:*:*:*"]}}],"versions":["4.10.0-rc1","4.10.0-rc2","4.10.0-rc3","4.10.0-rc4","4.11.0","4.11.0-rc1","4.11.0-rc2","4.11.0-rc3","4.9.0-rc1","4.9.0-rc2","4.9.0-rc3","4.9.0-rc4","4.9.0-rc5","samba-4.11.0rc3","samba-4.10.8","samba-4.9.13","samba-4.9.12","samba-4.10.7","ldb-2.0.6","samba-4.11.0rc2","samba-4.11.0rc1","samba-4.10.6","ldb-1.5.5","ldb-2.0.5","samba-4.9.11","ldb-1.4.7","samba-4.9.10","tdb-1.4.1","samba-4.9.7","samba-4.10.1","samba-4.9.5","ldb-1.6.3","tevent-0.10.0","talloc-2.2.0","tdb-1.4.0","samba-4.10.0","ldb-1.4.6","ldb-1.6.2","tevent-0.9.39","talloc-2.1.16","tdb-1.3.18","ldb-1.6.1","ldb-1.4.5","ldb-1.4.4","samba-4.10.0rc1","ldb-1.5.2","tevent-0.9.38","talloc-2.1.15","tdb-1.3.17","samba-4.9.4","samba-4.9.2","ldb-1.4.3","samba-4.9.1","samba-4.9.0","ldb-1.5.1","ldb-1.5.0","samba-4.9.0rc1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10197.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}]}