PT-2020-6555 · Samba+5 · Samba+5

Published 2020-06-18 · Updated 2024-06-15 · CVE-2020-25722

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)

Description The issue is related to flaws in the way Samba AD DC implements access and conformance checking of stored data, potentially allowing an attacker to cause total domain compromise. It is also described as a buffer overflow vulnerability in the Active Directory Domain Controller component of the Samba package, which could allow a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Buffer Overflow

Weakness Enumeration

CWE-863

CWE-120

Related Identifiers

ALT-PU-2021-3247

ALT-PU-2021-3296

ALT-PU-2021-3339

ALT-PU-2021-3470

AZL-36996

AZL-8651

BDU:2022-00004

CVE-2020-25722

DSA-5003-1

DSA-5015-1

ECHO-1D75-7A80-F32F

MGASA-2021-0585

OESA-2021-1461

OPENSUSE-SU-2021:3647-1

OPENSUSE-SU-2021_3647-1

OPENSUSE-SU-2024:11631-1

SUSE-SU-2021:3647-1

SUSE-SU-2022:0361-1

USN-5142-1

USN-5142-2

USN-5142-3

USN-5174-1

USN-5174-2

Affected Products

Alt Linux

Astra Linux

Linuxmint

Samba

Suse

Ubuntu

References · 96

• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81 · Vendor Advisory
• https://samba.org/samba/security/CVE-2020-25722.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-5142-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25722 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25718 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5015-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5174-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5174-2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3647-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0926SE47 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3647-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-25722 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-25722 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25722 · Security Note
• https://osv.dev/vulnerability/AZL-36996 · Vendor Advisory