A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba412 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-winbind-modulesUpgrade samba-common-libsUpgrade samba-common-toolsUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-clientUpgrade samba-commonUpgrade samba-libsUpgrade samba-client-libsUpgrade sambaUpgrade samba-winbindUpgrade libwbclientUpgrade samba-python | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-pidlUpgrade ctdb-testsUpgrade python2-sambaUpgrade ctdbUpgrade samba-common-libsUpgrade samba-winbindUpgrade sambaUpgrade python3-samba-testUpgrade samba-winbind-clientsUpgrade libsmbclientUpgrade samba-libsUpgrade samba-commonUpgrade python3-sambaUpgrade samba-winbind-modulesUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-testUpgrade python2-samba-testUpgrade libwbclientUpgrade samba-krb5-printingUpgrade samba-winbind-krb5-locatorUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade samba-common-tools | Jul 31, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.10.17 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libsamdb0Upgrade python3-ldb-develUpgrade libsmbldap0Upgrade libtdb1-32bitUpgrade libnetapi-develUpgrade libsmbclient0Upgrade samba-pidlUpgrade libndr1Upgrade samba-32bitUpgrade python-ldb-develUpgrade libnetapi-devel-32bitUpgrade libtalloc2Upgrade samba-cephUpgrade libndr-krb5pac0Upgrade libtevent-util0-32bitUpgrade libsamba-credentials0-32bitUpgrade libndr-krb5pac-develUpgrade libndr1-32bitUpgrade libsamdb-develUpgrade libndr0-32bitUpgrade ctdb-testsUpgrade libdcerpc0Upgrade libndr-standard-develUpgrade libwbclient-develUpgrade python3-ldbUpgrade libdcerpc-binding0-32bitUpgrade ctdbUpgrade libsmbldap2Upgrade samba-krb-printingUpgrade libsamba-policy0-32bitUpgrade libldb1Upgrade libndr-develUpgrade libsmbconf0-32bitUpgrade samba-ad-dcUpgrade libwbclient0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade ctdb-pcp-pmdaUpgrade libdcerpc-samr0Upgrade python-ldbUpgrade libsamba-errors0-32bitUpgrade libsamba-passdb0-32bitUpgrade libndr-standard0Upgrade libsamba-hostconfig-develUpgrade libndr-nbt0-32bitUpgrade samba-libs-python3-32bitUpgrade samba-client-32bitUpgrade samba-testUpgrade libldb2-32bitUpgrade python3-ldb-32bitUpgrade libldb-develUpgrade libsamba-errors-develUpgrade libsmbconf-develUpgrade libsmbconf0Upgrade libsamba-passdb-develUpgrade samba-core-develUpgrade ldb-toolsUpgrade libsamdb0-32bitUpgrade libsamba-errors0Upgrade libndr0Upgrade samba-python3Upgrade libsmbldap-develUpgrade libsamba-util0Upgrade libsamba-passdb0Upgrade libsmbldap0-32bitUpgrade libsamba-policy-python-develUpgrade samba-libsUpgrade libnetapi0-32bitUpgrade sambaUpgrade samba-libs-python3Upgrade libsamba-util0-32bitUpgrade libsamba-util-develUpgrade samba-libs-pythonUpgrade libsamba-policy-develUpgrade libnetapi0Upgrade libtdb1Upgrade libndr-krb5pac0-32bitUpgrade libsmbldap2-32bitUpgrade libsamba-policy0Upgrade libndr-nbt0Upgrade libdcerpc0-32bitUpgrade libdcerpc-develUpgrade libsamba-policy0-python3Upgrade libldb1-32bitUpgrade samba-docUpgrade libwbclient0Upgrade libldb2Upgrade samba-libs-python-32bitUpgrade samba-winbindUpgrade libsamba-policy-python3-develUpgrade libdcerpc-samr-develUpgrade libdcerpc-samr0-32bitUpgrade libsamba-credentials-develUpgrade samba-pythonUpgrade libsmbclient0-32bitUpgrade libdcerpc-binding0Upgrade libtevent0-32bitUpgrade libsamba-policy0-python3-32bitUpgrade ldapsmbUpgrade samba-winbind-32bitUpgrade libtalloc2-32bitUpgrade libtevent-util-develUpgrade samba-dsdb-modulesUpgrade samba-libs-32bitUpgrade libndr-standard0-32bitUpgrade libtevent0Upgrade libtevent-util0Upgrade libsamba-credentials0Upgrade libsmbclient-develUpgrade samba-clientUpgrade samba-ad-dc-32bitUpgrade libsamba-hostconfig0Upgrade libndr-nbt-devel | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade sambaUpgrade samba (Ubuntu Pro) | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub