CVE-2019-14870

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-SFU) Kerberos delegation model includes a feature allowing for a subset of clients to be opted out of constrained delegation in any way, either S4U2Self or regular Kerberos authentication, by forcing all tickets for these clients to be non-forwardable. In AD this is implemented by a user attribute delegationnotallowed (aka not-delegated), which translates to disallow-forwardable. However the Samba AD DC does not do that for S4U2Self and does set the forwardable flag even if the impersonated client has the not-delegated flag set.

References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type

GIT

Repo

https://github.com/samba-team/samba

Events

Introduced

df33344d8eb40221d60c99931690703a11d91bc2

Fixed

631a49647b76cc203917fa8d32e11ab3935106b3

Introduced

25f2fe02a615e2cf906b6fa495acd8ea0aa9998a

Fixed

d644dfea6f2a55b2c205a4f268372b72a06757d1

Introduced

d60cf580825819f11de9e50ec4c4ce591d695ad9

Fixed

7fc8563c2f6381c0389cdbb8c833e9bb89ec068b

Database specific

{
    "versions": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.9.17"
        },
        {
            "introduced": "4.10.0"
        },
        {
            "fixed": "4.10.11"
        },
        {
            "introduced": "4.11.0"
        },
        {
            "fixed": "4.11.3"
        }
    ]
}

Affected versions

ldb-1.*

ldb-1.5.5

ldb-1.5.6

samba-4.*

samba-4.10.0

samba-4.10.1

samba-4.10.10

samba-4.10.2

samba-4.10.3

samba-4.10.4

samba-4.10.5

samba-4.10.6

samba-4.10.7

samba-4.10.8

samba-4.10.9

samba-4.11.0

samba-4.11.1

samba-4.11.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-14870.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "30"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "31"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "14.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "16.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "19.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "19.10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.1"
            }
        ]
    }
]