[Samba] CVE-2019-14907 impact on smbd daemon

Madhappan, Silambarasan silambarasan.madhappan at hpe.com
Fri Jan 24 05:04:47 UTC 2020


Hi Team,

I am looking for more clarity of the impact of CVE-2019-14907 on smbd daemon.
On HP-UX we have not enabled AD DC feature.
Detail announcement of CVE-2019-14907<https://www.samba.org/samba/security/CVE-2019-14907.html> provides below information.
"(In the file server case, the most likely target, smbd, operates as process-per-client and so a crash there is harmless)."
Does it means only child process will be killed and smbd daemon will continue serving other client threads. ?
Please provide more information on how a crash is harmless.

Thanks,
Silambarasan M




More information about the samba mailing list