CVE-2020-14323MEDIUM
New! CVE Severity Now Using CVSS v3
The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Description
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.
References
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00012.html
https://bugzilla.redhat.com/show_bug.cgi?id=1891685
https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html
https://security.gentoo.org/glsa/202012-24
Details
Source: MITRE
Published: 2020-10-29
Updated: 2020-12-24
Type: CWE-476
Risk Information
CVSS v2
Base Score: 2.1
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 3.9
Severity: LOW
CVSS v3
Base Score: 5.5
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM
Vulnerable Software
Configuration 1
OR
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Configuration 2
OR
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Tenable Plugins
| ID | Name | Product | Family | Severity |
|---|---|---|---|---|
| 151396 | EulerOS Virtualization 3.0.2.2 : samba (EulerOS-SA-2021-2168) | Nessus | Huawei Local Security Checks | critical |
| 150674 | SUSE SLES11 Security Update : samba (SUSE-SU-2020:14525-1) | Nessus | SuSE Local Security Checks | medium |
| 149965 | Oracle Linux 8 : samba (ELSA-2021-1647) | Nessus | Oracle Linux Local Security Checks | critical |
| 149752 | CentOS 8 : samba (CESA-2021:1647) | Nessus | CentOS Local Security Checks | critical |
| 149679 | RHEL 8 : samba (RHSA-2021:1647) | Nessus | Red Hat Local Security Checks | critical |
| 147666 | EulerOS Virtualization 2.9.0 : samba (EulerOS-SA-2021-1635) | Nessus | Huawei Local Security Checks | critical |
| 147497 | EulerOS Virtualization 2.9.1 : samba (EulerOS-SA-2021-1625) | Nessus | Huawei Local Security Checks | critical |
| 147458 | EulerOS Virtualization 3.0.2.6 : samba (EulerOS-SA-2021-1423) | Nessus | Huawei Local Security Checks | medium |
| 147360 | NewStart CGSL CORE 5.04 / MAIN 5.04 : samba Multiple Vulnerabilities (NS-SA-2021-0024) | Nessus | NewStart CGSL Local Security Checks | critical |
| 147061 | EulerOS Virtualization 3.0.6.6 : samba (EulerOS-SA-2021-1517) | Nessus | Huawei Local Security Checks | critical |
| 147047 | EulerOS Virtualization for ARM 64 3.0.6.0 : samba (EulerOS-SA-2021-1533) | Nessus | Huawei Local Security Checks | critical |
| 146748 | EulerOS 2.0 SP2 : samba (EulerOS-SA-2021-1357) | Nessus | Huawei Local Security Checks | high |
| 146109 | EulerOS 2.0 SP5 : samba (EulerOS-SA-2021-1229) | Nessus | Huawei Local Security Checks | medium |
| 145189 | EulerOS 2.0 SP3 : samba (EulerOS-SA-2021-1118) | Nessus | Huawei Local Security Checks | critical |
| 144992 | Amazon Linux AMI : samba (ALAS-2021-1469) | Nessus | Amazon Linux Local Security Checks | critical |
| 144973 | CentOS 7 : samba (CESA-2020:5439) | Nessus | CentOS Local Security Checks | critical |
| 144800 | Amazon Linux 2 : ctdb (ALAS-2021-1585) | Nessus | Amazon Linux Local Security Checks | critical |
| 144739 | EulerOS Virtualization for ARM 64 3.0.2.0 : samba (EulerOS-SA-2021-1050) | Nessus | Huawei Local Security Checks | critical |
| 144607 | GLSA-202012-24 : Samba: Multiple vulnerabilities | Nessus | Gentoo Local Security Checks | critical |
| 144423 | RHEL 7 : samba (RHSA-2020:5439) | Nessus | Red Hat Local Security Checks | critical |
| 144332 | Oracle Linux 7 : samba (ELSA-2020-5439) | Nessus | Oracle Linux Local Security Checks | critical |
| 144296 | Scientific Linux Security Update : samba on SL7.x i686/x86_64 (2020:5439) | Nessus | Scientific Linux Local Security Checks | critical |
| 144176 | EulerOS 2.0 SP8 : samba (EulerOS-SA-2020-2533) | Nessus | Huawei Local Security Checks | medium |
| 143848 | SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:3081-1) | Nessus | SuSE Local Security Checks | medium |
| 143847 | SUSE SLES12 Security Update : samba (SUSE-SU-2020:3082-1) | Nessus | SuSE Local Security Checks | medium |
| 143822 | SUSE SLES15 Security Update : samba (SUSE-SU-2020:3087-1) | Nessus | SuSE Local Security Checks | medium |
| 143797 | SUSE SLED15 / SLES15 Security Update : samba (SUSE-SU-2020:3092-1) | Nessus | SuSE Local Security Checks | medium |
| 143766 | SUSE SLES12 Security Update : samba (SUSE-SU-2020:3083-1) | Nessus | SuSE Local Security Checks | medium |
| 143684 | SUSE SLES12 Security Update : samba (SUSE-SU-2020:3093-1) | Nessus | SuSE Local Security Checks | medium |
| 143416 | EulerOS 2.0 SP9 : samba (EulerOS-SA-2020-2491) | Nessus | Huawei Local Security Checks | medium |
| 143414 | EulerOS 2.0 SP9 : samba (EulerOS-SA-2020-2504) | Nessus | Huawei Local Security Checks | medium |
| 143186 | Debian DLA-2463-1 : samba security update | Nessus | Debian Local Security Checks | critical |
| 142668 | Fedora 32 : 2:samba (2020-2e1a1489be) | Nessus | Fedora Local Security Checks | medium |
| 142540 | openSUSE Security Update : samba (openSUSE-2020-1811) | Nessus | SuSE Local Security Checks | medium |
| 142419 | Samba 3.6.x < 4.11.15 / 4.12.x < 4.12.9 / 4.13.x < 4.13.1 Multiple Vulnerabilities | Nessus | Misc. | medium |
| 142351 | Fedora 33 : 2:samba (2020-c1e9ae02d2) | Nessus | Fedora Local Security Checks | medium |
| 142324 | openSUSE Security Update : samba (openSUSE-2020-1819) | Nessus | SuSE Local Security Checks | medium |
| 142218 | Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 20.10 : Samba vulnerabilities (USN-4611-1) | Nessus | Ubuntu Local Security Checks | medium |
| 142151 | FreeBSD : samba -- Multiple Vulnerabilities (9ca85b7c-1b31-11eb-8762-005056a311d1) | Nessus | FreeBSD Local Security Checks | medium |