NetSight
IP …
high7.5

CVE-2020-14303

A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4.

Impact

A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash.

Affected products

VendorProductAffected versions
SambaSamba
from 4.10.0 before 4.10.17
from 4.11.0 before 4.11.11
from 4.12.0 before 4.12.4
FedoraprojectFedora
Version 31
OpensuseLeap
Versions 15.1, 15.2
DebianDebian Linux
Version 9.0
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 18.04, 20.04

Weakness classification

CWE-834

References