Not analysed yet
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 4.2 | Medium | 3.0 | CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N | CNA (redhat) |
- CISA KEV Not listed.
- EPSS 0.019, the 79th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
References from the CNA
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14833
- www.samba.org/samba/security/CVE-2019-14833.html
- www.synology.com/security/advisory/Synology_SA_19_35
- lists.opensuse.org/opensuse-security-announce/2019-11/msg00015.html
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UMIYCYXCPRTVCVZ3TP6ZGPJ6RZS3IX4G/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OKPYHDFI7HRELVXBE5J4MTGSI35AKFBI/
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3IUACPZJXSC4OM6P2V4IC4QMZQZWPD/
- lists.debian.org/debian-lts-announce/2021/05/msg00023.html
- lists.debian.org/debian-lts-announce/2023/09/msg00013.html