UpHeron
All vulnerabilities

Servers and applications

CVE-2019-3880

A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to create a new registry hive file anywhere they have unix permissions which could lead to creation of a new file in the Samba share. Versions before 4.8.11, 4.9.6 and 4.10.2 are vulnerable.

Severity
Medium 5.4
Published
9 Apr 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.8.11, 4.9.6, 4.10.2
Exploit chance
3.2% in the next 30 daysHigher than 88% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
SambaServers and applications · cpe:a:samba:samba
  • From 3.2.0 before 4.8.11
  • From 4.9.0 before 4.9.6
  • From 4.10.0 before 4.10.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-3880
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-3880