Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-10704

A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.

Published

2020-05-06T14:15:10.817

Last Modified

2024-11-21T04:55:53.480

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-674
  • Type: Primary
    CWE-674
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application samba samba < 4.10.15 Yes
Application samba samba < 4.11.8 Yes
Application samba samba < 4.12.2 Yes
Operating System fedoraproject fedora 30 Yes
Operating System fedoraproject fedora 31 Yes
Operating System opensuse leap 15.2 Yes
Operating System debian debian_linux 9.0 Yes
References