CVE-2020-10704
CVE-2020-10704
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
CVSS 7.5 · Élevée · EPSS 3,5% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
samba
- Versions du logiciel
- All versions before 4.10.15: Concernée
- All versions before 4.11.8: Concernée
- All versions before 4.12.2: Concernée
Aucun correctif publié
samba Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 2:4.12.3+dfsg-2
Mettez à jour vers 2:4.12.3+dfsg-2
samba Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2:4.12.3+dfsg-2
Mettez à jour vers 2:4.12.3+dfsg-2
samba Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2:4.12.3+dfsg-2
Mettez à jour vers 2:4.12.3+dfsg-2
samba Ubuntu:Pro:14.04:LTS
- Versions du logiciel
- 2:3.6.18-1ubuntu3
- 2:4.0.10+dfsg-4ubuntu2
- 2:4.0.13+dfsg-1ubuntu1
- 2:4.1.3+dfsg-2ubuntu2
- 2:4.1.3+dfsg-2ubuntu3
- 2:4.1.3+dfsg-2ubuntu4
- 2:4.1.3+dfsg-2ubuntu5
- 2:4.1.6+dfsg-1ubuntu1
- 2:4.1.6+dfsg-1ubuntu2
- 2:4.1.6+dfsg-1ubuntu2.14.04.1
- 2:4.1.6+dfsg-1ubuntu2.14.04.2
- 2:4.1.6+dfsg-1ubuntu2.14.04.3
- 2:4.1.6+dfsg-1ubuntu2.14.04.4
- 2:4.1.6+dfsg-1ubuntu2.14.04.5
- 2:4.1.6+dfsg-1ubuntu2.14.04.7
- 2:4.1.6+dfsg-1ubuntu2.14.04.8
- 2:4.1.6+dfsg-1ubuntu2.14.04.9
- 2:4.1.6+dfsg-1ubuntu2.14.04.11
- 2:4.1.6+dfsg-1ubuntu2.14.04.12
- 2:4.1.6+dfsg-1ubuntu2.14.04.13
- 2:4.3.8+dfsg-0ubuntu0.14.04.2
- 2:4.3.9+dfsg-0ubuntu0.14.04.1
- 2:4.3.9+dfsg-0ubuntu0.14.04.3
- 2:4.3.11+dfsg-0ubuntu0.14.04.1
- 2:4.3.11+dfsg-0ubuntu0.14.04.2
- 2:4.3.11+dfsg-0ubuntu0.14.04.3
- 2:4.3.11+dfsg-0ubuntu0.14.04.4
- 2:4.3.11+dfsg-0ubuntu0.14.04.6
- 2:4.3.11+dfsg-0ubuntu0.14.04.7
- 2:4.3.11+dfsg-0ubuntu0.14.04.8
- 2:4.3.11+dfsg-0ubuntu0.14.04.9
- 2:4.3.11+dfsg-0ubuntu0.14.04.10
- 2:4.3.11+dfsg-0ubuntu0.14.04.11
- 2:4.3.11+dfsg-0ubuntu0.14.04.12
- 2:4.3.11+dfsg-0ubuntu0.14.04.13
- 2:4.3.11+dfsg-0ubuntu0.14.04.14
- 2:4.3.11+dfsg-0ubuntu0.14.04.16
- 2:4.3.11+dfsg-0ubuntu0.14.04.17
- 2:4.3.11+dfsg-0ubuntu0.14.04.19
- 2:4.3.11+dfsg-0ubuntu0.14.04.20
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3
- 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4
- Plages de versions concernées
- ECOSYSTEM: < 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6
Mettez à jour vers 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6
samba Ubuntu:16.04:LTS
- Versions du logiciel
- 2:4.1.17+dfsg-4ubuntu2
- 2:4.1.20+dfsg-1ubuntu1
- 2:4.1.20+dfsg-1ubuntu2
- 2:4.1.20+dfsg-1ubuntu3
- 2:4.1.20+dfsg-1ubuntu5
- 2:4.3.3+dfsg-1ubuntu1
- 2:4.3.3+dfsg-1ubuntu2
- 2:4.3.3+dfsg-1ubuntu3
- 2:4.3.6+dfsg-1ubuntu1
- 2:4.3.8+dfsg-0ubuntu1
- 2:4.3.9+dfsg-0ubuntu0.16.04.1
- 2:4.3.9+dfsg-0ubuntu0.16.04.2
- 2:4.3.9+dfsg-0ubuntu0.16.04.3
- 2:4.3.11+dfsg-0ubuntu0.16.04.1
- 2:4.3.11+dfsg-0ubuntu0.16.04.3
- 2:4.3.11+dfsg-0ubuntu0.16.04.5
- 2:4.3.11+dfsg-0ubuntu0.16.04.6
- 2:4.3.11+dfsg-0ubuntu0.16.04.7
- 2:4.3.11+dfsg-0ubuntu0.16.04.8
- 2:4.3.11+dfsg-0ubuntu0.16.04.9
- 2:4.3.11+dfsg-0ubuntu0.16.04.10
- 2:4.3.11+dfsg-0ubuntu0.16.04.11
- 2:4.3.11+dfsg-0ubuntu0.16.04.12
- 2:4.3.11+dfsg-0ubuntu0.16.04.13
- 2:4.3.11+dfsg-0ubuntu0.16.04.15
- 2:4.3.11+dfsg-0ubuntu0.16.04.16
- 2:4.3.11+dfsg-0ubuntu0.16.04.17
- 2:4.3.11+dfsg-0ubuntu0.16.04.18
- 2:4.3.11+dfsg-0ubuntu0.16.04.19
- 2:4.3.11+dfsg-0ubuntu0.16.04.20
- 2:4.3.11+dfsg-0ubuntu0.16.04.21
- 2:4.3.11+dfsg-0ubuntu0.16.04.23
- 2:4.3.11+dfsg-0ubuntu0.16.04.24
- 2:4.3.11+dfsg-0ubuntu0.16.04.25
- Plages de versions concernées
- ECOSYSTEM: < 2:4.3.11+dfsg-0ubuntu0.16.04.26
Mettez à jour vers 2:4.3.11+dfsg-0ubuntu0.16.04.26
samba Ubuntu:18.04:LTS
- Versions du logiciel
- 2:4.6.7+dfsg-1ubuntu3
- 2:4.7.1+dfsg-1ubuntu1
- 2:4.7.3+dfsg-1ubuntu1
- 2:4.7.4+dfsg-1ubuntu1
- 2:4.7.6+dfsg~ubuntu-0ubuntu1
- 2:4.7.6+dfsg~ubuntu-0ubuntu2
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.2
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.4
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.5
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.6
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.7
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.9
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.10
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.11
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.13
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.14
- 2:4.7.6+dfsg~ubuntu-0ubuntu2.15
- Plages de versions concernées
- ECOSYSTEM: < 2:4.7.6+dfsg~ubuntu-0ubuntu2.16
Mettez à jour vers 2:4.7.6+dfsg~ubuntu-0ubuntu2.16
samba Ubuntu:20.04:LTS
- Versions du logiciel
- 2:4.10.7+dfsg-0ubuntu2
- 2:4.10.7+dfsg-0ubuntu3
- 2:4.11.1+dfsg-3ubuntu1
- 2:4.11.1+dfsg-3ubuntu2
- 2:4.11.1+dfsg-3ubuntu4
- 2:4.11.5+dfsg-1ubuntu1
- 2:4.11.5+dfsg-1ubuntu2
- 2:4.11.6+dfsg-0ubuntu1
- Plages de versions concernées
- ECOSYSTEM: < 2:4.11.6+dfsg-0ubuntu1.1
Mettez à jour vers 2:4.11.6+dfsg-0ubuntu1.1
Sources originales
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7DVGCHG3XPIBQ5ETGMGW7MXNOO4HFH4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U5KW3ZO35NVDO57JSBZHTQZOS3AIQ5QE/
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html
- https://security.gentoo.org/glsa/202007-15
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html
- https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10704
- https://www.samba.org/samba/security/CVE-2020-10704.html
- https://nvd.nist.gov/vuln/detail/CVE-2020-10704