CVE-2020-10704

State: Published
Severity: 7.5 High
Published: May 6, 2020
Updated: Aug 4, 2024
Reserved: Mar 20, 2020

Description

A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	redhat

Weaknesses

CWE-674

Affected Products

Product	Versions
sambaRed Hat	All versions before 4.10.15Affected All versions before 4.11.8Affected All versions before 4.12.2Affected

References

FEDORA-2020-e244c98af5vendor-advisory
FEDORA-2020-9cf0b1c8f1vendor-advisory
openSUSE-SU-2020:1023vendor-advisory
GLSA-202007-15vendor-advisory
openSUSE-SU-2020:1313vendor-advisory
[debian-lts-announce] 20201123 [SECURITY] [DLA 2463-1] samba security updatemailing-list
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10704
https://www.samba.org/samba/security/CVE-2020-10704.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.