Skip to content
CVE Tracker
Back

CVE-2019-10197

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters…

Medium6.5EPSS 3.2%
Published
Updated
Reserved
Assigned by
redhat

Description

A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samba configuration file. An unauthenticated attacker could use this flaw to escape the shared directory and access the contents of directories outside the share.

Scores

CVSS scores of CVE-2019-10197, by who scored it
Scored byCVSSScoreVector
redhatCNA (assigner)3.0Medium6.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
NVDNVD · Modified3.0Critical9.1CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS (exploitation in 30 days)
3.2% · top 12% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.5.

Weakness

Affected products

  • SAMBA · samba

    • affected samba 4.9.x up to 4.9.13
    • affected samba 4.10.x up to 4.10.8
    • affected samba 4.11.x up to 4.11.0rc3

References (15)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .