Vulnerability in Samba
CVE-2020-10704
A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
EPSS: 0.035 (87.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Samba
- Debian Debian_linux — versions 9.0
- Fedoraproject Fedora — versions 30, 31
- Opensuse Leap — versions 15.2
- Red Hat Samba — versions All versions before 4.10.15, All versions before 4.11.8, All versions before 4.12.2
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (vendor-advisory)
- secalert@redhat.com (vendor-advisory)
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory)
- secalert@redhat.com (vendor-advisory, Third Party Advisory)
- secalert@redhat.com (vendor-advisory, Mailing List, Third Party Advisory)
- secalert@redhat.com (mailing-list, Mailing List, Third Party Advisory)
- secalert@redhat.com (Third Party Advisory, Issue Tracking)
- secalert@redhat.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2020-10704?
- CVE-2020-10704 is a high-severity vulnerability in Samba, classified under Uncontrolled Recursion. CVSS score: 7.5/10. Published 2020-05-06.
- How severe is CVE-2020-10704?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2020-10704 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.