Skip to content
Heist/ feed
Back to feed
Medium

Security advisory

Type: advisorySources: OSVCVE: CVE-2019-10218

A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2019-10218
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 07:15 UTC · Revision 1

Source evidence

CVE-2019-10218

core-osv · Original source

Published 6 Nov 2019, 10:15 UTC

A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.

osv:CVE-2019-10218
Complete source record
{
  "id": "7d52973a90ff4bdbad0bcb9eb3af41ad224338f5c55f021e4ed31f47ec1ce2e8",
  "url": "https://osv.dev/vulnerability/CVE-2019-10218",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2019-10218",
    "summary": "A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this vulnerability to create files outside of the current working directory using the privileges of the client user.",
    "evidence": "osv:CVE-2019-10218",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2019-10218",
      "aliases": [
        "CVE-2019-10218"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/samba-team/samba",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "0d69a39c463ea7da23f3b2d1aecedb2d6bbcfd15"
                },
                {
                  "introduced": "25f2fe02a615e2cf906b6fa495acd8ea0aa9998a"
                },
                {
                  "fixed": "e6f6df7658d0f147a32af157cffaf11b69e59a2b"
                },
                {
                  "introduced": "d60cf580825819f11de9e50ec4c4ce591d695ad9"
                },
                {
                  "fixed": "df2b97d12e6d5d36dc152896a21ba44bc7531654"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "4.9.15"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "4.10.0"
                      },
                      {
                        "fixed": "4.10.10"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "4.11.0"
                      },
                      {
                        "fixed": "4.11.2"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "samba-4.9.14",
            "samba-4.10.9",
            "samba-4.11.1",
            "samba-4.11.0",
            "samba-4.9.12",
            "ldb-1.4.8",
            "samba-4.10.7",
            "ldb-1.5.6",
            "samba-4.10.6",
            "ldb-1.5.5",
            "samba-4.9.11",
            "ldb-1.4.7",
            "samba-4.9.10",
            "samba-4.9.7",
            "samba-4.10.1",
            "samba-4.9.5",
            "samba-4.10.0",
            "ldb-1.4.6",
            "ldb-1.4.5",
            "ldb-1.4.4",
            "samba-4.9.4",
            "samba-4.9.2",
            "ldb-1.4.3",
            "samba-4.9.1",
            "samba-4.9.0",
            "samba-4.9.0rc5",
            "samba-4.9.0rc4",
            "samba-4.9.0rc3",
            "ldb-1.4.2",
            "samba-4.9.0rc2",
            "samba-4.9.0rc1",
            "ldb-1.4.1",
            "talloc-2.1.14",
            "tdb-1.3.16",
            "tevent-0.9.37",
            "ldb-1.4.0",
            "talloc-2.1.13",
            "talloc-2.1.12",
            "ldb-1.3.2",
            "tevent-0.9.36",
            "samba-4.8.0rc1",
            "ldb-1.3.1",
            "tevent-0.9.35",
            "talloc-2.1.11",
            "tevent-0.9.34",
            "ldb-1.3.0",
            "ldb-1.2.2",
            "tdb-1.3.15",
            "ldb-1.2.1",
            "tevent-0.9.33",
            "talloc-2.1.10",
            "samba-4.7.0rc1",
            "ldb-1.2.0",
            "tdb-1.3.14",
            "tevent-0.9.32",
            "ldb-1.1.31",
            "ldb-1.1.30",
            "tdb-1.3.13",
            "talloc-2.1.9",
            "samba-4.6.0rc1",
            "ldb-1.1.29",
            "tdb-1.3.12",
            "ldb-1.1.28",
            "tevent-0.9.31",
            "tdb-1.3.11",
            "tevent-0.9.30",
            "samba-4.5.0rc1",
            "ldb-1.1.27",
            "tevent-0.9.29",
            "talloc-2.1.8",
            "tdb-1.3.10",
            "talloc-2.1.7",
            "tdb-1.3.9",
            "talloc-2.1.6",
            "tevent-0.9.28",
            "ldb-1.1.26",
            "tevent-0.9.27",
            "samba-4.4.0rc1",
            "ldb-1.1.25",
            "ldb-1.1.23",
            "talloc-2.1.5",
            "tdb-1.3.8",
            "tevent-0.9.26",
            "ldb-1.1.22",
            "talloc-2.1.4",
            "samba-4.3.0rc1",
            "ldb-1.1.21",
            "tdb-1.3.7",
            "talloc-2.1.3",
            "tdb-1.3.6",
            "tevent-0.9.25",
            "tdb-1.3.5",
            "talloc-2.1.2",
            "tevent-0.9.24",
            "tevent-0.9.23",
            "ldb-1.1.20",
            "ldb-1.1.19",
            "tdb-1.3.4",
            "tdb-1.3.3",
            "ldb-1.1.18",
            "tdb-1.3.2",
            "samba-4.2.0rc1",
            "tevent-0.9.22",
            "tdb-1.3.1",
            "tdb-1.3.0",
            "talloc-2.1.1",
            "ldb-1.1.17",
            "tdb-1.2.13",
            "tevent-0.9.21",
            "tevent-0.9.20",
            "talloc-2.1.0",
            "tevent-0.9.19",
            "ldb-1.1.16",
            "tdb-1.2.12",
            "tevent-0.9.18",
            "ldb-1.1.15",
            "ldb-1.1.14",
            "tdb-1.2.11",
            "talloc-2.0.8",
            "samba-4.0.0rc1",
            "ldb-1.1.13",
            "samba-4.0.0beta8",
            "ldb-1.1.12",
            "ldb-1.1.11",
            "samba-4.0.0beta7",
            "tevent-0.9.17",
            "samba-4.0.0beta6",
            "ldb-1.1.10",
            "ldb-1.1.9",
            "samba-4.0.0beta5",
            "samba-4.0.0beta4",
            "ldb-1.1.8",
            "samba-4.0.0beta3",
            "samba-4.0.0beta2",
            "tevent-0.9.16",
            "samba-4.0.0beta1",
            "samba-4.0.0alpha21",
            "samba-4.0.0alpha20",
            "ldb-1.1.6",
            "samba-4.0.0alpha19",
            "ldb-1.1.5",
            "tdb-1.2.10",
            "samba-4.0.0alpha18",
            "tevent-0.9.15",
            "ldb-1.1.4",
            "ldb-1.1.3",
            "talloc-2.0.7",
            "samba-4.0.0alpha17",
            "tevent-0.9.14",
            "ldb-1.1.2",
            "tevent-0.9.13",
            "tevent-0.9.12",
            "ldb-1.1.0",
            "tevent-0.9.11",
            "tdb-1.2.1",
            "samba-4.0.0alpha10",
            "samba-4.0.0alpha9",
            "tdb-1.2.0",
            "tevent-0.9.8",
            "talloc-2.0.0",
            "samba-4.0.0alpha8",
            "talloc-1.3.1",
            "tdb-1.1.5",
            "samba-4.0.0alpha7",
            "samba-4.0.0alpha6"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-10218.json"
          }
        }
      ],
      "modified": "2026-10-24T10:30:50.721594900Z",
      "provider": "osv",
      "references": [
        "https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html",
        "https://lists.debian.org/debian-lts-announce/2023/09/msg00013.html",
        "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/",
        "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UMIYCYXCPRTVCVZ3TP6ZGPJ6RZS3IX4G/",
        "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/",
        "https://www.samba.org/samba/security/CVE-2019-10218.html",
        "https://www.synology.com/security/advisory/Synology_SA_19_35",
        "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10218"
      ],
      "provider_metadata": {
        "unresolved_ranges": [
          {
            "cpes": [
              "cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*",
              "cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*"
            ],
            "vendor_product": "fedoraproject:fedora",
            "extracted_events": [
              {
                "range": [
                  {
                    "introduced": "29"
                  },
                  {
                    "last_affected": "29"
                  },
                  {
                    "introduced": "31"
                  },
                  {
                    "last_affected": "31"
                  }
                ],
                "source": "CPE_STRING"
              }
            ]
          }
        ]
      }
    },
    "related_cves": [
      {
        "value": "CVE-2019-10218",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 437315,
  "published_at": "2019-11-06T10:15:10.607+00:00"
}