CVE-2019-14907
samba: Crash after failed character conversion at log level 3 or above
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · January 21, 2020
Updated · February 21, 2026
Description
A flaw was found in samba. When log levels are set at 3 or higher, the string obtained from the client, after a failed character conversion, is printed which could cause long-lived processes to terminate. The highest threat from this vulnerability is to system availability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Do not set a log level of 3 or above in production.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CWE-125 · Out-of-bounds Read