Summary
Martin von Wittich and Wilko Meyer discovered that Samba incorrectly
handled certain empty UDP packets when being used as a AD DC NBT server. A
remote attacker could possibly use this issue to cause Samba to crash,
resulting in a denial of service.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.29 |
| Ubuntu · 18.04 LTS 18.04:LTS | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.18 |
| Ubuntu · 20.04 LTS 20.04:LTS | samba | 2:4.11.6+dfsg-0ubuntu1.4 |
Vulnerabilities 1
-
Unscored —
A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samb…
References
-
report
https://ubuntu.com/security/CVE-2020-14303