Complete
Details
Details
Assignee
Andrew Walker
Andrew WalkerReporter
Andrew Walker
Andrew WalkerComponents
Fix versions
Priority
More fields
More fields
Katalon Platform
Katalon Platform
Created December 10, 2019 at 1:52 PM
Updated July 1, 2022 at 4:47 PM
Resolved December 10, 2019 at 4:22 PM
===========================================================
== Subject: Samba AD DC zone-named record Denial of
== Service in DNS management server (dnsserver)
==
== CVE ID#: CVE-2019-14861
==
== Versions: All Samba versions since Samba 4.0
==
== Summary: An authenticated user can crash the DCE/RPC DNS
== management server by creating records with matching
== the zone name
===========================================================
===========================================================
== Subject: DelegationNotAllowed not being enforced
== in protocol transition on Samba AD DC.
==
== CVE ID#: CVE-2019-14870
==
== Versions: All Samba versions since Samba 4.0
==
== Summary: The DelegationNotAllowed Kerberos feature restriction
== was not being applied when processing protocol
== transition requests (S4U2Self), in the AD DC KDC.
===========================================================