A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-samba | Aug 22, 2024 | Jul 7, 2020 | |
| Debian | debian-upgrade-samba | Nov 24, 2020 | Jul 7, 2020 | |
| Freebsd | freebsd-upgrade-package-samba410freebsd-upgrade-package-samba411freebsd-upgrade-package-samba412 | Jul 5, 2020 | Jul 2, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-fs-samba | Jul 28, 2020 | Jul 7, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-libsmbclienthuawei-euleros-2_0_sp5-upgrade-libwbclienthuawei-euleros-2_0_sp5-upgrade-sambahuawei-euleros-2_0_sp5-upgrade-samba-clienthuawei-euleros-2_0_sp5-upgrade-samba-client-libshuawei-euleros-2_0_sp5-upgrade-samba-commonhuawei-euleros-2_0_sp5-upgrade-samba-common-libshuawei-euleros-2_0_sp5-upgrade-samba-common-toolshuawei-euleros-2_0_sp5-upgrade-samba-libshuawei-euleros-2_0_sp5-upgrade-samba-pythonhuawei-euleros-2_0_sp5-upgrade-samba-winbindhuawei-euleros-2_0_sp5-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp5-upgrade-samba-winbind-modules | Nov 2, 2020 | Jul 7, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-ctdbhuawei-euleros-2_0_sp8-upgrade-ctdb-testshuawei-euleros-2_0_sp8-upgrade-libsmbclienthuawei-euleros-2_0_sp8-upgrade-libwbclienthuawei-euleros-2_0_sp8-upgrade-python2-sambahuawei-euleros-2_0_sp8-upgrade-python2-samba-testhuawei-euleros-2_0_sp8-upgrade-python3-sambahuawei-euleros-2_0_sp8-upgrade-python3-samba-testhuawei-euleros-2_0_sp8-upgrade-sambahuawei-euleros-2_0_sp8-upgrade-samba-clienthuawei-euleros-2_0_sp8-upgrade-samba-client-libshuawei-euleros-2_0_sp8-upgrade-samba-commonhuawei-euleros-2_0_sp8-upgrade-samba-common-libshuawei-euleros-2_0_sp8-upgrade-samba-common-toolshuawei-euleros-2_0_sp8-upgrade-samba-dc-libshuawei-euleros-2_0_sp8-upgrade-samba-krb5-printinghuawei-euleros-2_0_sp8-upgrade-samba-libshuawei-euleros-2_0_sp8-upgrade-samba-pidlhuawei-euleros-2_0_sp8-upgrade-samba-testhuawei-euleros-2_0_sp8-upgrade-samba-test-libshuawei-euleros-2_0_sp8-upgrade-samba-winbindhuawei-euleros-2_0_sp8-upgrade-samba-winbind-clientshuawei-euleros-2_0_sp8-upgrade-samba-winbind-krb5-locatorhuawei-euleros-2_0_sp8-upgrade-samba-winbind-modules | Jul 31, 2020 | Jul 7, 2020 | |
| Samba | samba-upgrade-4_10_17samba-upgrade-4_11_11samba-upgrade-4_12_4 | Jul 7, 2020 | Jul 7, 2020 | |
| Suse | — | suse-upgrade-ctdbsuse-upgrade-ctdb-pcp-pmdasuse-upgrade-ctdb-testssuse-upgrade-ldapsmbsuse-upgrade-ldb-toolssuse-upgrade-libdcerpc-binding0suse-upgrade-libdcerpc-binding0-32bitsuse-upgrade-libdcerpc-develsuse-upgrade-libdcerpc-samr-develsuse-upgrade-libdcerpc-samr0suse-upgrade-libdcerpc-samr0-32bitsuse-upgrade-libdcerpc0suse-upgrade-libdcerpc0-32bitsuse-upgrade-libldb-develsuse-upgrade-libldb1suse-upgrade-libldb1-32bitsuse-upgrade-libldb2suse-upgrade-libldb2-32bitsuse-upgrade-libndr-develsuse-upgrade-libndr-krb5pac-develsuse-upgrade-libndr-krb5pac0suse-upgrade-libndr-krb5pac0-32bitsuse-upgrade-libndr-nbt-develsuse-upgrade-libndr-nbt0suse-upgrade-libndr-nbt0-32bitsuse-upgrade-libndr-standard-develsuse-upgrade-libndr-standard0suse-upgrade-libndr-standard0-32bitsuse-upgrade-libndr0suse-upgrade-libndr0-32bitsuse-upgrade-libndr1suse-upgrade-libndr1-32bitsuse-upgrade-libnetapi-develsuse-upgrade-libnetapi-devel-32bitsuse-upgrade-libnetapi0suse-upgrade-libnetapi0-32bitsuse-upgrade-libsamba-credentials-develsuse-upgrade-libsamba-credentials0suse-upgrade-libsamba-credentials0-32bitsuse-upgrade-libsamba-errors-develsuse-upgrade-libsamba-errors0suse-upgrade-libsamba-errors0-32bitsuse-upgrade-libsamba-hostconfig-develsuse-upgrade-libsamba-hostconfig0suse-upgrade-libsamba-hostconfig0-32bitsuse-upgrade-libsamba-passdb-develsuse-upgrade-libsamba-passdb0suse-upgrade-libsamba-passdb0-32bitsuse-upgrade-libsamba-policy-develsuse-upgrade-libsamba-policy-python-develsuse-upgrade-libsamba-policy-python3-develsuse-upgrade-libsamba-policy0suse-upgrade-libsamba-policy0-32bitsuse-upgrade-libsamba-policy0-python3suse-upgrade-libsamba-policy0-python3-32bitsuse-upgrade-libsamba-util-develsuse-upgrade-libsamba-util0suse-upgrade-libsamba-util0-32bitsuse-upgrade-libsamdb-develsuse-upgrade-libsamdb0suse-upgrade-libsamdb0-32bitsuse-upgrade-libsmbclient-develsuse-upgrade-libsmbclient0suse-upgrade-libsmbclient0-32bitsuse-upgrade-libsmbconf-develsuse-upgrade-libsmbconf0suse-upgrade-libsmbconf0-32bitsuse-upgrade-libsmbldap-develsuse-upgrade-libsmbldap0suse-upgrade-libsmbldap0-32bitsuse-upgrade-libsmbldap2suse-upgrade-libsmbldap2-32bitsuse-upgrade-libtalloc2suse-upgrade-libtalloc2-32bitsuse-upgrade-libtdb1suse-upgrade-libtdb1-32bitsuse-upgrade-libtevent-util-develsuse-upgrade-libtevent-util0suse-upgrade-libtevent-util0-32bitsuse-upgrade-libtevent0suse-upgrade-libtevent0-32bitsuse-upgrade-libwbclient-develsuse-upgrade-libwbclient0suse-upgrade-libwbclient0-32bitsuse-upgrade-python-ldbsuse-upgrade-python-ldb-develsuse-upgrade-python3-ldbsuse-upgrade-python3-ldb-32bitsuse-upgrade-python3-ldb-develsuse-upgrade-sambasuse-upgrade-samba-32bitsuse-upgrade-samba-ad-dcsuse-upgrade-samba-ad-dc-32bitsuse-upgrade-samba-cephsuse-upgrade-samba-clientsuse-upgrade-samba-client-32bitsuse-upgrade-samba-core-develsuse-upgrade-samba-docsuse-upgrade-samba-dsdb-modulessuse-upgrade-samba-krb-printingsuse-upgrade-samba-libssuse-upgrade-samba-libs-32bitsuse-upgrade-samba-libs-pythonsuse-upgrade-samba-libs-python-32bitsuse-upgrade-samba-libs-python3suse-upgrade-samba-libs-python3-32bitsuse-upgrade-samba-pidlsuse-upgrade-samba-pythonsuse-upgrade-samba-python3suse-upgrade-samba-testsuse-upgrade-samba-winbindsuse-upgrade-samba-winbind-32bit | Jul 18, 2020 | Jul 2, 2020 |
| Ubuntu | ubuntu-pro-upgrade-sambaubuntu-upgrade-samba | Aug 5, 2020 | Jul 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub