CVE Vulnerabilities

CVE-2020-14303

Excessive Iteration

Published: Jul 06, 2020 | Modified: Nov 07, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
7.5 IMPORTANT
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM

A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash.

Weakness

The product performs an iteration or loop without sufficiently limiting the number of times that the loop is executed.

Affected Software

Name Vendor Start Version End Version
Samba Samba 4.10.0 (including) 4.10.17 (excluding)
Samba Samba 4.11.0 (including) 4.11.11 (excluding)
Samba Samba 4.12.0 (including) 4.12.4 (excluding)
Samba Ubuntu bionic *
Samba Ubuntu devel *
Samba Ubuntu eoan *
Samba Ubuntu focal *
Samba Ubuntu trusty *
Samba Ubuntu trusty/esm *
Samba Ubuntu xenial *

References