A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba412Upgrade samba411Upgrade samba410 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-commonUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-winbind-modulesUpgrade samba-clientUpgrade libwbclientUpgrade samba-pythonUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libs | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-commonUpgrade samba-winbindUpgrade samba-pidlUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade ctdbUpgrade python2-sambaUpgrade samba-libsUpgrade sambaUpgrade python3-sambaUpgrade python3-samba-testUpgrade ctdb-testsUpgrade libwbclientUpgrade samba-dc-libsUpgrade samba-client-libsUpgrade samba-testUpgrade samba-clientUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libs | Jul 31, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.10.17 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade samba-ad-dc-32bitUpgrade samba-libs-pythonUpgrade libsamba-credentials-develUpgrade libtevent0-32bitUpgrade ldapsmbUpgrade libldb1-32bitUpgrade libsmbldap2-32bitUpgrade libdcerpc-develUpgrade libsamba-policy0Upgrade libsmbclient-develUpgrade libdcerpc-samr0-32bitUpgrade samba-clientUpgrade libndr-nbt0Upgrade libtevent-util-develUpgrade libtevent-util0Upgrade samba-libsUpgrade libtevent0Upgrade libsamba-policy-develUpgrade libtdb1Upgrade libnetapi0-32bitUpgrade samba-libs-python-32bitUpgrade libsamba-hostconfig0Upgrade samba-winbindUpgrade libdcerpc-binding0Upgrade libldb2Upgrade libsamba-credentials0Upgrade sambaUpgrade libsamba-policy0-python3-32bitUpgrade libndr-nbt-develUpgrade samba-libs-32bitUpgrade samba-libs-python3Upgrade libtalloc2-32bitUpgrade libndr-standard0-32bitUpgrade samba-pythonUpgrade libsamba-util0-32bitUpgrade libndr-krb5pac0-32bitUpgrade samba-winbind-32bitUpgrade samba-docUpgrade libsmbldap0-32bitUpgrade samba-dsdb-modulesUpgrade libsamba-policy-python-develUpgrade libdcerpc0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-policy-python3-develUpgrade libsmbclient0-32bitUpgrade libnetapi0Upgrade libsamba-policy0-python3Upgrade libwbclient0Upgrade libsamba-util-develUpgrade libndr0Upgrade samba-libs-python3-32bitUpgrade samba-krb-printingUpgrade libnetapi-develUpgrade samba-32bitUpgrade libsamdb0-32bitUpgrade libsamba-credentials0-32bitUpgrade libldb2-32bitUpgrade libndr-krb5pac0Upgrade libndr0-32bitUpgrade libldb1Upgrade libndr-standard0Upgrade python-ldbUpgrade libsmbldap0Upgrade libsamdb0Upgrade libndr1Upgrade python3-ldb-32bitUpgrade libtalloc2Upgrade libsmbldap2Upgrade libsmbconf0Upgrade libsamba-errors0-32bitUpgrade libsamba-passdb0-32bitUpgrade libsamba-hostconfig-develUpgrade samba-ad-dcUpgrade libsamba-hostconfig0-32bitUpgrade libndr-nbt0-32bitUpgrade samba-cephUpgrade libsmbclient0Upgrade python-ldb-develUpgrade ctdb-pcp-pmdaUpgrade libndr-develUpgrade libwbclient0-32bitUpgrade libsamba-errors-develUpgrade libsmbconf0-32bitUpgrade libnetapi-devel-32bitUpgrade libtdb1-32bitUpgrade samba-client-32bitUpgrade libsmbconf-develUpgrade samba-pidlUpgrade python3-ldb-develUpgrade libdcerpc-samr0Upgrade libdcerpc-binding0-32bitUpgrade libldb-develUpgrade samba-testUpgrade libwbclient-develUpgrade samba-core-develUpgrade libsamba-passdb0Upgrade libsmbldap-develUpgrade libsamba-util0Upgrade ctdbUpgrade samba-python3Upgrade libndr-standard-develUpgrade libdcerpc0Upgrade ctdb-testsUpgrade libndr-krb5pac-develUpgrade libsamdb-develUpgrade python3-ldbUpgrade libndr1-32bitUpgrade libsamba-errors0Upgrade libsamba-policy0-32bitUpgrade libsamba-passdb-develUpgrade libtevent-util0-32bitUpgrade ldb-tools | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub