Log in Start free

Vulnerability · Published May 4, 2020 · Assigned by redhat

CVE-2020-10700

Medium 5.3

In plain English

A medium-severity use-after-free in samba from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)2.0%top 18.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause denial of service. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20samba4.12.2-r0ALPINE-CVE-2020-10700
Alpine:v3.21samba4.12.2-r0ALPINE-CVE-2020-10700
Alpine:v3.22samba4.12.2-r0ALPINE-CVE-2020-10700
Alpine:v3.23samba4.12.2-r0ALPINE-CVE-2020-10700
Alpine:v3.24samba4.12.2-r0ALPINE-CVE-2020-10700
Debian:12samba2:4.12.3+dfsg-2DEBIAN-CVE-2020-10700
Debian:13samba2:4.12.3+dfsg-2DEBIAN-CVE-2020-10700
Debian:14samba2:4.12.3+dfsg-2DEBIAN-CVE-2020-10700

Affected products (as reported)

VendorProductVersions
Red Hat samba All versions before 4.10.15All versions before 4.11.8All versions before 4.12.2

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

References