Not rated
CVE-2020-14303 A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4
Description
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- www.samba.org www.samba.org
- security.netapp.com security.netapp.com
- FEDORA-2020-5131d30947 lists.fedoraproject.org
- openSUSE-SU-2020:0984 lists.opensuse.org
- openSUSE-SU-2020:1023 lists.opensuse.org
- GLSA-202007-15 security.gentoo.org
- USN-4454-2 usn.ubuntu.com
- USN-4454-1 usn.ubuntu.com
- openSUSE-SU-2020:1313 lists.opensuse.org
- [debian-lts-announce] 20201123 [SECURITY] [DLA 2463-1] samba security update lists.debian.org
Timeline
- Published
- Last modified
Other CVEs of samba
The 40 CVEs of samba →
CVE-2023-4154
A design flaw was found in Samba's DirSync control implementation, which exposes passwords and secrets in Active…
7.5
High
CVE-2023-0922
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset…
5.9
Medium
CVE-2023-0225
A flaw was found in Samba
4.3
Medium
CVE-2023-0614
The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was…
7.7
High