A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade samba | Aug 22, 2024 | Jul 7, 2020 |
| Debian | — | Upgrade samba | Nov 24, 2020 | Jul 7, 2020 |
| Freebsd | — | Upgrade samba411Upgrade samba410Upgrade samba412 | Jul 5, 2020 | Jul 2, 2020 |
| Gentoo Linux | — | Upgrade net-fs/samba. | Jul 28, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade samba-commonUpgrade samba-clientUpgrade libsmbclientUpgrade samba-winbind-clientsUpgrade samba-winbind-modulesUpgrade samba-common-toolsUpgrade samba-common-libsUpgrade libwbclientUpgrade sambaUpgrade samba-client-libsUpgrade samba-winbindUpgrade samba-libsUpgrade samba-python | Nov 2, 2020 | Jul 7, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade samba-client-libsUpgrade samba-dc-libsUpgrade samba-test-libsUpgrade python2-samba-testUpgrade samba-winbind-krb5-locatorUpgrade libwbclientUpgrade samba-common-toolsUpgrade samba-krb5-printingUpgrade samba-clientUpgrade samba-testUpgrade samba-winbind-clientsUpgrade samba-libsUpgrade samba-commonUpgrade samba-winbind-modulesUpgrade ctdbUpgrade ctdb-testsUpgrade sambaUpgrade samba-winbindUpgrade python2-sambaUpgrade samba-common-libsUpgrade python3-samba-testUpgrade samba-pidlUpgrade python3-sambaUpgrade libsmbclient | Jul 31, 2020 | Jul 7, 2020 |
| Samba | — | Upgrade to Samba 4.11.11 or later.Upgrade to Samba 4.12.4 or later.Upgrade to Samba 4.10.17 or later. | Jul 7, 2020 | Jul 7, 2020 |
| Suse | — | Upgrade samba-libs-32bitUpgrade libsamba-util-develUpgrade samba-ad-dc-32bitUpgrade libsamba-util0-32bitUpgrade libsmbldap0-32bitUpgrade samba-libs-pythonUpgrade libndr-nbt-develUpgrade libndr-standard0-32bitUpgrade samba-libs-python3Upgrade libdcerpc-develUpgrade libnetapi0Upgrade libldb1-32bitUpgrade libsamba-policy-develUpgrade libsamba-policy0Upgrade libsmbldap2-32bitUpgrade libndr-nbt0Upgrade sambaUpgrade libnetapi0-32bitUpgrade libndr-krb5pac0-32bitUpgrade libsamba-hostconfig0Upgrade libtevent0Upgrade libsamba-policy-python-develUpgrade samba-clientUpgrade libsamba-policy0-python3-32bitUpgrade libtevent-util-develUpgrade libsamba-policy-python3-develUpgrade libtevent0-32bitUpgrade libsmbclient-develUpgrade libdcerpc-samr0-32bitUpgrade libldb2Upgrade samba-pythonUpgrade libtevent-util0Upgrade ldapsmbUpgrade samba-dsdb-modulesUpgrade libsamba-policy0-python3Upgrade samba-docUpgrade samba-libsUpgrade libdcerpc-binding0Upgrade libsamba-credentials0Upgrade libtalloc2-32bitUpgrade libwbclient0Upgrade libdcerpc0-32bitUpgrade libdcerpc-samr-develUpgrade libsamba-credentials-develUpgrade libsmbclient0-32bitUpgrade samba-winbindUpgrade samba-winbind-32bitUpgrade libtdb1Upgrade samba-libs-python-32bitUpgrade libdcerpc0Upgrade samba-cephUpgrade libndr-krb5pac0Upgrade python-ldb-develUpgrade libsmbldap2Upgrade libsamdb0Upgrade libndr-krb5pac-develUpgrade libtdb1-32bitUpgrade ctdb-testsUpgrade samba-python3Upgrade ctdb-pcp-pmdaUpgrade libdcerpc-samr0Upgrade libndr1Upgrade libsamba-errors0Upgrade ldb-toolsUpgrade libsamba-passdb-develUpgrade libsamba-policy0-32bitUpgrade samba-core-develUpgrade libsamba-errors-develUpgrade samba-testUpgrade samba-32bitUpgrade libnetapi-develUpgrade libsmbldap-develUpgrade libldb1Upgrade samba-pidlUpgrade python3-ldb-develUpgrade python-ldbUpgrade libsmbldap0Upgrade libwbclient0-32bitUpgrade libndr-standard-develUpgrade libsamba-errors0-32bitUpgrade libsamba-hostconfig0-32bitUpgrade libndr1-32bitUpgrade libsamdb0-32bitUpgrade libsamdb-develUpgrade samba-libs-python3-32bitUpgrade libsamba-passdb0Upgrade libwbclient-develUpgrade libsamba-util0Upgrade python3-ldbUpgrade ctdbUpgrade libldb-develUpgrade libldb2-32bitUpgrade libndr0Upgrade libsamba-credentials0-32bitUpgrade libsmbconf-develUpgrade python3-ldb-32bitUpgrade libndr0-32bitUpgrade libtevent-util0-32bitUpgrade libnetapi-devel-32bitUpgrade samba-krb-printingUpgrade libtalloc2Upgrade libsmbclient0Upgrade libdcerpc-binding0-32bitUpgrade libsmbconf0-32bitUpgrade samba-ad-dcUpgrade samba-client-32bitUpgrade libsmbconf0Upgrade libsamba-passdb0-32bitUpgrade libndr-nbt0-32bitUpgrade libndr-standard0Upgrade libsamba-hostconfig-develUpgrade libndr-devel | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | — | Upgrade samba (Ubuntu Pro)Upgrade samba | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub