Samba up to 4.10.16/4.11.10/4.12.3 AD DC NBT Server UDP Packet input validation

Summaryinfo

A vulnerability was found in Samba up to 4.10.16/4.11.10/4.12.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component AD DC NBT Server. This manipulation as part of UDP Packet causes input validation. This vulnerability is registered as CVE-2020-14303. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability has been found in Samba up to 4.10.16/4.11.10/4.12.3 (File Transfer Software) and classified as problematic. Affected by this vulnerability is an unknown function of the component AD DC NBT Server. The manipulation as part of a UDP Packet leads to a input validation vulnerability. The CWE definition for the vulnerability is CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. As an impact it is known to affect availability. The summary by CVE is:

A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash.

The weakness was published 07/06/2020 as Bug 1851298 as not defined bug report (Bugzilla). It is possible to read the advisory at bugzilla.redhat.com. This vulnerability is known as CVE-2020-14303 since 06/17/2020. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 4.10.17, 4.11.11 or 4.12.4 eliminates this vulnerability.

Similar entry is available at VDB-157674. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• File Transfer Software

Name

• Samba

Version

• 4.10.0
• 4.10.1
• 4.10.2
• 4.10.3
• 4.10.4
• 4.10.5
• 4.10.6
• 4.10.7
• 4.10.8
• 4.10.9
• 4.10.10
• 4.10.11
• 4.10.12
• 4.10.13
• 4.10.14
• 4.10.15
• 4.10.16
• 4.11.0
• 4.11.1
• 4.11.2
• 4.11.3
• 4.11.4
• 4.11.5
• 4.11.6
• 4.11.7
• 4.11.8
• 4.11.9
• 4.11.10
• 4.12.0
• 4.12.1
• 4.12.2
• 4.12.3

License

• open-source

Website

• Product: https://www.samba.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion