VID |
23300 |
Severity |
30 |
Port |
139 |
Protocol |
TCP |
Class |
Samba |
Detailed Description |
The version of Samba running on the remote host is 4.9.x < 4.9.9. It is, therefore, potentially affected by a denial of service vulnerability in the AD DC DNS management server (dnsserver) RPC server process.
* References: https://www.samba.org/samba/security/CVE-2019-12435.html https://www.samba.org/samba/history/samba-4.9.9.html
* Platforms Affected: Samba Project, Samba versions 4.9.x before 4.9.9 Linux Any version Unix Any version |
Recommendation |
Upgrade to the latest version of Samba 4.9.9 or later, available from the Samba Web site at https://www.samba.org/samba/download/ |
Related URL |
CVE-2019-12435 (CVE) |
Related URL |
(SecurityFocus) |
Related URL |
(ISS) |
|