5
CVSSv2

CVE-2020-10704

Published: 06/05/2020 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions prior to 4.10.15, prior to 4.11.8 and prior to 4.12.2.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

samba samba

fedoraproject fedora 30

fedoraproject fedora 31

opensuse leap 15.2

debian debian linux 9.0

Vendor Advisories

Debian Bug report logs - #960188 samba: CVE-2020-10704 Package: src:samba; Maintainer for src:samba is Debian Samba Maintainers <pkg-samba-maint@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 10 May 2020 13:15:04 UTC Severity: important Tags: security, upstream Found in ve ...
Samba could be made to consume resources if it received a specially crafted LDAP query ...
USN-4341-1 introduced a regression in Samba ...
Several security issues were fixed in Samba ...