PT-2020-5587 · Samba+4 · Samba+4

Andrei Popa + 1 · Published 2020-04-28 · Updated 2024-06-15 · CVE-2020-10700

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions samba versions prior to 4.10.15 samba versions prior to 4.11.8 samba versions prior to 4.12.2

Description A use-after-free flaw was found in the way samba AD DC LDAP servers handled 'Paged Results' control combined with the 'ASQ' control. This issue can be exploited by a malicious user in a samba AD to cause denial of service.

Recommendations For versions prior to 4.10.15, update to version 4.10.15 or later. For versions prior to 4.11.8, update to version 4.11.8 or later. For versions prior to 4.12.2, update to version 4.12.2 or later. As a temporary workaround, consider restricting access to the Paged Results and ASQ controls in the LDAP server until a patch is available.

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2020-1888

ALT-PU-2020-1927

BDU:2021-01208

CVE-2020-10700

ECHO-03BD-5B98-B7C0

MGASA-2020-0205

OPENSUSE-SU-2020:1023-1

OPENSUSE-SU-2020:1313-1

OPENSUSE-SU-2020_1023-1

OPENSUSE-SU-2020_1313-1

OPENSUSE-SU-2024:10911-1

OPENSUSE-SU-2024:11365-1

SUSE-SU-2020:1948-1

SUSE-SU-2020:2673-1

SUSE-SU-2020_1948-1

USN-4341-1

USN-4341-3

Affected Products

Alt Linux

Linuxmint

Samba

Suse

Ubuntu

References · 139

• https://osv.dev/vulnerability/SUSE-SU-2020:1948-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4341-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4341-3 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/Y7DVGCHG3XPIBQ5ETGMGW7MXNOO4HFH4 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:2673-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01208 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-10700 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4341-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-10700 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10700 · Security Note
• https://samba.org/samba/security/CVE-2020-10700.html · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-10700 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WG54NRMES2GTURZKZH6H4BGXCD3OMJDJ · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11365-1 · Vendor Advisory