A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba412 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade sambaUpgrade samba-winbindUpgrade samba-pythonUpgrade samba-libsUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-clientUpgrade samba-common-libsUpgrade samba-winbind-modulesUpgrade samba-commonUpgrade libsmbclientUpgrade samba-common-toolsUpgrade samba-winbind-clients | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-testUpgrade samba-clientUpgrade python2-samba-testUpgrade libwbclientUpgrade samba-client-libsUpgrade samba-krb5-printingUpgrade samba-dc-libsUpgrade samba-common-toolsUpgrade samba-winbind-krb5-locatorUpgrade samba-test-libsUpgrade python2-sambaUpgrade samba-winbind-modulesUpgrade sambaUpgrade samba-common-libsUpgrade python3-sambaUpgrade samba-pidlUpgrade samba-commonUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade python3-samba-testUpgrade ctdbUpgrade ctdb-testsUpgrade samba-libsUpgrade samba-winbind | Jul 31, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.10.17 or later.Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.12.4 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade libsamba-policy0-32bitUpgrade libsamba-passdb-develUpgrade libsmbldap-develUpgrade libndr-develUpgrade libsamba-passdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-standard0Upgrade samba-core-develUpgrade libsamba-errors0-32bitUpgrade libsamba-errors-develUpgrade ctdb-pcp-pmdaUpgrade libsmbclient0Upgrade libsmbconf-develUpgrade libwbclient0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade python3-ldb-develUpgrade samba-testUpgrade samba-krb-printingUpgrade python-ldb-develUpgrade samba-32bitUpgrade libsmbldap2Upgrade libndr-krb5pac0Upgrade libldb1Upgrade libtevent-util0-32bitUpgrade libsamdb0Upgrade libndr-standard-develUpgrade libsmbconf0-32bitUpgrade libsamba-hostconfig-develUpgrade ldb-toolsUpgrade libdcerpc-binding0-32bitUpgrade samba-ad-dcUpgrade libndr0Upgrade samba-python3Upgrade libsamba-util0Upgrade libndr0-32bitUpgrade libsamdb0-32bitUpgrade python3-ldbUpgrade libsamba-errors0Upgrade ctdbUpgrade libldb-develUpgrade libldb2-32bitUpgrade libsamba-passdb0Upgrade python3-ldb-32bitUpgrade libndr-krb5pac-develUpgrade samba-client-32bitUpgrade libsmbconf0Upgrade libwbclient-develUpgrade samba-pidlUpgrade libtalloc2Upgrade libtdb1-32bitUpgrade libdcerpc0Upgrade libdcerpc-samr0Upgrade libsmbldap0Upgrade libsamba-credentials0-32bitUpgrade libndr1-32bitUpgrade python-ldbUpgrade libndr1Upgrade samba-libs-python3-32bitUpgrade libnetapi-devel-32bitUpgrade samba-cephUpgrade libsamdb-develUpgrade ctdb-testsUpgrade libnetapi-develUpgrade libsamba-policy-python3-develUpgrade libtalloc2-32bitUpgrade libtevent0Upgrade libndr-standard0-32bitUpgrade samba-dsdb-modulesUpgrade libndr-nbt-develUpgrade samba-libs-python3Upgrade libsamba-util-develUpgrade libtevent0-32bitUpgrade libsamba-credentials-develUpgrade libdcerpc-samr0-32bitUpgrade ldapsmbUpgrade samba-libs-pythonUpgrade libsamba-credentials0Upgrade libndr-krb5pac0-32bitUpgrade samba-libs-32bitUpgrade samba-ad-dc-32bitUpgrade samba-libsUpgrade samba-clientUpgrade libsamba-hostconfig0Upgrade libsmbldap0-32bitUpgrade libnetapi0Upgrade libsamba-util0-32bitUpgrade libsamba-policy-develUpgrade samba-libs-python-32bitUpgrade sambaUpgrade libtdb1Upgrade libwbclient0Upgrade libdcerpc0-32bitUpgrade samba-docUpgrade libdcerpc-binding0Upgrade samba-winbindUpgrade libsamba-policy0-python3-32bitUpgrade libsamba-policy-python-develUpgrade libsmbclient0-32bitUpgrade libsamba-policy0-python3Upgrade samba-pythonUpgrade libdcerpc-samr-develUpgrade libtevent-util-develUpgrade libsmbldap2-32bitUpgrade libsamba-policy0Upgrade libtevent-util0Upgrade libndr-nbt0Upgrade libldb1-32bitUpgrade libdcerpc-develUpgrade libsmbclient-develUpgrade libldb2Upgrade samba-winbind-32bitUpgrade libnetapi0-32bit | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub