Out-of-Bounds Memory Write Vulnerability in Samba
CVE-2020-27840

7.5HIGH

Key Information:

Vendor

Samba

Status
Samba
Vendor
CVE Published:
12 May 2021
đź”” Create Samba Vulnerability Alert

What is CVE-2020-27840?

A flaw was discovered in Samba where spaces in domain names were not properly handled. Instead of being ignored, these spaces could lead to the generation of invalid domain name strings, ultimately causing a zero-byte write to out-of-bounds memory. This can result in a crash, negatively affecting system availability and operational stability.

Affected Version(s)

samba samba 4.14.1, samba 4.13.6, samba 4.12.13

References

https://security.netapp.com/advisory/ntap-20210326-0007/
x_refsource_CONFIRM
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisoryx_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2021/03/msg0...
mailing-listx_refsource_MLIST

EPSS Score

5% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.