Log in Start free

Vulnerability · Published May 6, 2020 · Assigned by redhat

CVE-2020-10704

High 7.5

In plain English

A high-severity security flaw in samba from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.5% (higher than 89% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)3.5%top 10.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20samba4.12.2-r0ALPINE-CVE-2020-10704
Alpine:v3.21samba4.12.2-r0ALPINE-CVE-2020-10704
Alpine:v3.22samba4.12.2-r0ALPINE-CVE-2020-10704
Alpine:v3.23samba4.12.2-r0ALPINE-CVE-2020-10704
Alpine:v3.24samba4.12.2-r0ALPINE-CVE-2020-10704
Debian:12samba2:4.12.3+dfsg-2DEBIAN-CVE-2020-10704
Debian:13samba2:4.12.3+dfsg-2DEBIAN-CVE-2020-10704
Debian:14samba2:4.12.3+dfsg-2DEBIAN-CVE-2020-10704

Affected products (as reported)

VendorProductVersions
Red Hat samba All versions before 4.10.15All versions before 4.11.8All versions before 4.12.2

Weakness: CWE-674 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References