CVE-2020-10760

· MEDIUMModified

← All CVEs

CVSS v3.1

6.5

EPSS

2.66%

Published

Jul 6, 2020

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-416

Affected Products (9)

samba · samba (up to 4.10.17)vulnerable

samba · samba (up to 4.11.11)vulnerable

samba · samba (up to 4.12.4)vulnerable

canonical · ubuntu_linuxvulnerable

opensuse · leapvulnerable

References (18)

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html

https://bugzilla.redhat.com/show_bug.cgi?id=1849509%3B

https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/

KEV Catalog EPSS Scores Vendors All CVEs