CVE-2019-14847: Fedoraproject Fedora

Medium severity, CVSS 4.9. EPSS: 2.1% chance of exploitation in the next 30 days.

A flaw was found in samba 4.0.0 before samba 4.9.15 and samba 4.10.x before 4.10.10. An attacker can crash AD DC LDAP server via dirsync resulting in denial of service. Privilege escalation is not possible with this issue.

Affected products

• Fedoraproject Fedora: version 29 only; version 30 only
• Opensuse Leap: version 15.0 only
• Samba Samba: from 4.0.0, before 4.9.15 (fixed in 4.9.15); from 4.10.0, before 4.10.10 (fixed in 4.10.10)

Published 2019-11-06. Last modified 2026-06-17.