Denial of Service Vulnerability in Samba by Samba Team
CVE-2020-10745

7.5HIGH

Key Information:

Vendor

Samba

Status
Samba
Vendor
CVE Published:
7 July 2020
đź”” Create Samba Vulnerability Alert

What is CVE-2020-10745?

A flaw exists in all Samba versions prior to 4.10.17, 4.11.11, and 4.12.4, affecting how NetBIOS is processed over TCP/IP. This vulnerability enables remote attackers to exploit the Samba server, leading to excessive CPU consumption that may cause service unavailability. The primary risk involves potential system downtime, impacting businesses reliant on the Samba service.

Affected Version(s)

Samba All Samba versions before 4.10.17, before 4.11.11 and before 4.12.4

References

https://bugzilla.redhat.com/show_bug.cgi?id=1849491%3B
x_refsource_MISC
https://www.samba.org/samba/security/CVE-2020-10745.html
x_refsource_MISC
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisoryx_refsource_FEDORA

EPSS Score

16% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.