CVE-2020-14383

Name
CVE-2020-14383
Description
A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Vendor Advisory https://www.samba.org/samba/security/CVE-2020-14383.html
Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=1892636
GENTOO https://security.gentoo.org/glsa/202012-24
secalert@redhat.com https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* samba >= 4.0.0 < 4.11.15
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* samba >= 4.12.0 < 4.12.9
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* samba >= 4.13.0 < 4.13.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
samba edge-main 4.12.9-r0 None fixed
samba edge-main 4.12.7-r0 None possibly vulnerable
samba edge-main 4.12.5-r0 None possibly vulnerable
samba edge-main 4.12.2-r0 None possibly vulnerable
samba edge-main 4.11.5-r0 None possibly vulnerable
samba edge-main 4.11.3-r0 None possibly vulnerable
samba edge-main 4.11.2-r0 None possibly vulnerable
samba edge-main 4.10.8-r0 None possibly vulnerable
samba edge-main 4.10.5-r0 None possibly vulnerable
samba edge-main 4.10.3-r0 None possibly vulnerable
samba edge-main 4.8.11-r0 None possibly vulnerable
samba edge-main 4.8.7-r0 None possibly vulnerable
samba edge-main 4.8.4-r0 None possibly vulnerable
samba edge-main 4.7.6-r0 None possibly vulnerable
samba edge-main 4.7.3-r0 None possibly vulnerable
samba edge-main 4.7.0-r0 None possibly vulnerable
samba edge-main 4.6.1-r0 None possibly vulnerable
samba 3.22-main 4.12.9-r0 None fixed
samba 3.22-main 4.12.7-r0 None possibly vulnerable
samba 3.22-main 4.12.5-r0 None possibly vulnerable
samba 3.22-main 4.12.2-r0 None possibly vulnerable
samba 3.22-main 4.11.5-r0 None possibly vulnerable
samba 3.22-main 4.11.3-r0 None possibly vulnerable
samba 3.22-main 4.11.2-r0 None possibly vulnerable
samba 3.22-main 4.10.8-r0 None possibly vulnerable
samba 3.22-main 4.10.5-r0 None possibly vulnerable
samba 3.22-main 4.10.3-r0 None possibly vulnerable
samba 3.22-main 4.8.11-r0 None possibly vulnerable
samba 3.22-main 4.8.7-r0 None possibly vulnerable
samba 3.22-main 4.8.4-r0 None possibly vulnerable
samba 3.22-main 4.7.6-r0 None possibly vulnerable
samba 3.22-main 4.7.3-r0 None possibly vulnerable
samba 3.22-main 4.7.0-r0 None possibly vulnerable
samba 3.22-main 4.6.1-r0 None possibly vulnerable
samba 3.21-main 4.12.9-r0 None fixed
samba 3.21-main 4.12.7-r0 None possibly vulnerable
samba 3.21-main 4.12.5-r0 None possibly vulnerable
samba 3.21-main 4.12.2-r0 None possibly vulnerable
samba 3.21-main 4.11.5-r0 None possibly vulnerable
samba 3.21-main 4.11.3-r0 None possibly vulnerable
samba 3.21-main 4.11.2-r0 None possibly vulnerable
samba 3.21-main 4.10.8-r0 None possibly vulnerable
samba 3.21-main 4.10.5-r0 None possibly vulnerable
samba 3.21-main 4.10.3-r0 None possibly vulnerable
samba 3.21-main 4.8.11-r0 None possibly vulnerable
samba 3.21-main 4.8.7-r0 None possibly vulnerable
samba 3.21-main 4.8.4-r0 None possibly vulnerable
samba 3.21-main 4.7.6-r0 None possibly vulnerable
samba 3.21-main 4.7.3-r0 None possibly vulnerable
samba 3.21-main 4.7.0-r0 None possibly vulnerable
samba 3.21-main 4.6.1-r0 None possibly vulnerable
samba 3.20-main 4.12.9-r0 None fixed
samba 3.20-main 4.12.7-r0 None possibly vulnerable
samba 3.20-main 4.12.5-r0 None possibly vulnerable
samba 3.20-main 4.12.2-r0 None possibly vulnerable
samba 3.20-main 4.11.5-r0 None possibly vulnerable
samba 3.20-main 4.11.3-r0 None possibly vulnerable
samba 3.20-main 4.11.2-r0 None possibly vulnerable
samba 3.20-main 4.10.8-r0 None possibly vulnerable
samba 3.20-main 4.10.5-r0 None possibly vulnerable
samba 3.20-main 4.10.3-r0 None possibly vulnerable
samba 3.20-main 4.8.11-r0 None possibly vulnerable
samba 3.20-main 4.8.7-r0 None possibly vulnerable
samba 3.20-main 4.8.4-r0 None possibly vulnerable
samba 3.20-main 4.7.6-r0 None possibly vulnerable
samba 3.20-main 4.7.3-r0 None possibly vulnerable
samba 3.20-main 4.7.0-r0 None possibly vulnerable
samba 3.20-main 4.6.1-r0 None possibly vulnerable
samba 3.19-main 4.12.9-r0 None fixed
samba 3.19-main 4.12.7-r0 None possibly vulnerable
samba 3.19-main 4.12.5-r0 None possibly vulnerable
samba 3.19-main 4.12.2-r0 None possibly vulnerable
samba 3.19-main 4.11.5-r0 None possibly vulnerable
samba 3.19-main 4.11.3-r0 None possibly vulnerable
samba 3.19-main 4.11.2-r0 None possibly vulnerable
samba 3.19-main 4.10.8-r0 None possibly vulnerable
samba 3.19-main 4.10.5-r0 None possibly vulnerable
samba 3.19-main 4.10.3-r0 None possibly vulnerable
samba 3.19-main 4.8.11-r0 None possibly vulnerable
samba 3.19-main 4.8.7-r0 None possibly vulnerable
samba 3.19-main 4.8.4-r0 None possibly vulnerable
samba 3.19-main 4.7.6-r0 None possibly vulnerable
samba 3.19-main 4.7.3-r0 None possibly vulnerable
samba 3.19-main 4.7.0-r0 None possibly vulnerable
samba 3.19-main 4.6.1-r0 None possibly vulnerable
samba 3.18-main 4.12.9-r0 None fixed
samba 3.17-main 4.12.9-r0 None fixed
samba 3.12-main 4.12.9-r0 None fixed
samba 3.11-main 4.11.16-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
samba 3.10-main 4.10.18-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable