CVEvulnerability

CVE-2020-10704

7.5 HIGH Published 2020-05-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-05-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-674

Description

A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.

Affected configurations

• samba samba (>= 4.0.0 < 4.10.15) • samba samba (>= 4.11.0 < 4.11.8) • samba samba (>= 4.12.0 < 4.12.2) • fedoraproject fedora 30 • fedoraproject fedora 31 • opensuse leap 15.2 • debian debian linux 9.0

Related

Weakness · CWE (1)

  • CWE-674 Uncontrolled Recursion weakness

References