CVEvulnerability
CVE-2020-25719
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-02-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-287, CWE-362
Description
A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.
Affected configurations
• samba samba (>= 4.0.0 < 4.13.14)
• samba samba (>= 4.14.0 < 4.14.10)
• samba samba (>= 4.15.0 < 4.15.2)
• debian debian linux 9.0
• debian debian linux 10.0
• fedoraproject fedora 33
• fedoraproject fedora 34
• fedoraproject fedora 35
• canonical ubuntu linux 20.04
• canonical ubuntu linux 21.04
• canonical ubuntu linux 21.10
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• redhat enterprise linux desktop 7.0
• redhat enterprise linux eus 8.2
• redhat enterprise linux eus 8.4
• redhat enterprise linux for ibm z systems 7.0
• redhat enterprise linux for ibm z systems 8.0
• redhat enterprise linux for ibm z systems eus 8.2
• redhat enterprise linux for ibm z systems eus 8.4
• redhat enterprise linux for power big endian 7.0
• redhat enterprise linux for power little endian 7.0
• redhat enterprise linux for power little endian 8.0
• redhat enterprise linux for power little endian eus 8.2
• redhat enterprise linux for power little endian eus 8.4
• redhat enterprise linux for scientific computing 7.0
• redhat enterprise linux server aus 8.2
• redhat enterprise linux server aus 8.4
• redhat enterprise linux server tus 8.2
• redhat enterprise linux server tus 8.4
• redhat enterprise linux server update services for sap solutions 8.2
• redhat enterprise linux server update services for sap solutions 8.4
• redhat enterprise linux workstation 7.0
Related
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2019732 Issue Tracking, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/202309-06 security.gentoo.org
- https://www.samba.org/samba/security/CVE-2020-25719.html Mitigation, Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2019732 Issue Tracking, Patch, Third Party Advisory
- https://security.gentoo.org/glsa/202309-06 security.gentoo.org
- https://www.samba.org/samba/security/CVE-2020-25719.html Mitigation, Vendor Advisory