Security Features in Windows Server - CVE-2020-17049

Vulnerability identifier: #VU48269

CSH Severity: Low

CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-17049

CWE-ID: CWE-254

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to bypass authentication process.

The vulnerability exists due to security feature bypass issue in Kerberos. A remote administrator can bypass authentication process and gain unauthorized access to the application.

Windows Server
Amazon Linux AMI
Oracle Linux
Gentoo Linux
SUSE MicroOS
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
SUSE Linux Enterprise Module for Python2
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Module for Basesystem
Fedora
Service Telemetry Framework
Red Hat OpenShift Container Platform
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
python3-kdcproxy
python3-jwcrypto
python3-custodia
custodia
ipa-healthcheck-core
ipa-healthcheck
slapi-nis
python3-pyusb
python3-yubico
krb5 (Red Hat package)
opendnssec
libldb2-32bit-debuginfo
ldb-debugsource
libldb2-32bit
python3-ldb-devel
python3-ldb-debuginfo
python3-ldb
libldb-devel
ldb-tools-debuginfo
ldb-tools
libldb2-debuginfo
libldb2
libldb
softhsm-devel
softhsm
ipa-common
ipa-client
ipa-client-epn
ipa-client-samba
ipa-server-trust-ad
python3-ipatests
python3-ipaserver
python3-ipalib
python3-ipaclient
ipa-server-dns
ipa-server-common
ipa-selinux
ipa-python-compat
ipa-client-common
ipa-server
samba
samba-ceph
samba-winbind-debuginfo
samba-winbind
samba-libs-python3-debuginfo
samba-libs-python3
samba-libs-debuginfo
samba-libs
samba-debugsource
libndr-standard0-debuginfo
libsamba-passdb0-debuginfo
libsamba-passdb0
libsamba-hostconfig0-debuginfo
libsamba-hostconfig0
libsamba-errors0-debuginfo
libsamba-errors0
libsamba-credentials0-debuginfo
libsamba-credentials0
libnetapi0-debuginfo
libnetapi0
libndr1-debuginfo
libndr1
samba-client-debuginfo
libndr-standard0
libndr-nbt0-debuginfo
libndr-nbt0
libndr-krb5pac0-debuginfo
libndr-krb5pac0
libdcerpc0-debuginfo
libdcerpc0
libdcerpc-binding0-debuginfo
libdcerpc-binding0
ctdb-debuginfo
ctdb
libsamba-util0-debuginfo
samba-debuginfo
samba-client
samba-ceph-debuginfo
libwbclient0-debuginfo
libwbclient0
libtevent-util0-debuginfo
libtevent-util0
libsmbldap2-debuginfo
libsmbldap2
libsmbconf0-debuginfo
libsmbconf0
libsmbclient0-debuginfo
libsmbclient0
libsamdb0-debuginfo
libsamdb0
libsamba-util0
net-fs/samba
python3-qrcode
python3-qrcode-core
bind-dyndb-ldap
webMethods Managed File Transfer
IBM Application Gateway
OpenShift Data Foundation (formerly OpenShift Container Storage)

Install updates from vendor's website.

Service Telemetry Framework - update to 1.5.4
Red Hat OpenShift Container Platform - update to 4.13.2
IBM Application Gateway - update to 24.09
python3-kdcproxy - update to 0.4-5
python3-jwcrypto - update to 0.5.0-1.1
python3-custodia - update to 0.6.0-3
custodia - update to 0.6.0-3
ipa-healthcheck-core - update to 0.12-3
ipa-healthcheck - update to 0.12-3
slapi-nis - update to 0.60.0-4.0.1
python3-pyusb - update to 1.0.0-9.1
python3-yubico - update to 1.3.2-9.1
krb5 (Red Hat package) - addressed in versions 1.18.2-16.el8_6, 1.20.1-8.el9
opendnssec - update to 2.1.7-1
libldb2-32bit-debuginfo - update to 2.2.2-3.3.1
ldb-debugsource - addressed in versions 2.2.2-3.3.1, 2.2.2-4.6.1
libldb2-32bit - update to 2.2.2-3.3.1
python3-ldb-devel - update to 2.2.2-3.3.1
python3-ldb-debuginfo - addressed in versions 2.2.2-3.3.1, 2.2.2-4.6.1
python3-ldb - addressed in versions 2.2.2-3.3.1, 2.2.2-4.6.1
libldb-devel - update to 2.2.2-3.3.1
ldb-tools-debuginfo - update to 2.2.2-3.3.1
ldb-tools - update to 2.2.2-3.3.1
libldb2-debuginfo - addressed in versions 2.2.2-3.3.1, 2.2.2-4.6.1
libldb2 - addressed in versions 2.2.2-3.3.1, 2.2.2-4.6.1
libldb - addressed in versions 2.4.4-1.fc35, 2.5.2-1.fc36, 2.5.2-2.fc37
softhsm-devel - update to 2.6.0-5
softhsm - update to 2.6.0-5
ipa-common - update to 4.9.12-11.0.1
ipa-client - update to 4.9.12-11.0.1
ipa-client-epn - update to 4.9.12-11.0.1
ipa-client-samba - update to 4.9.12-11.0.1
ipa-server-trust-ad - update to 4.9.12-11.0.1
python3-ipatests - update to 4.9.12-11.0.1
python3-ipaserver - update to 4.9.12-11.0.1
python3-ipalib - update to 4.9.12-11.0.1
python3-ipaclient - update to 4.9.12-11.0.1
ipa-server-dns - update to 4.9.12-11.0.1
ipa-server-common - update to 4.9.12-11.0.1
ipa-selinux - update to 4.9.12-11.0.1
ipa-python-compat - update to 4.9.12-11.0.1
ipa-client-common - update to 4.9.12-11.0.1
ipa-server - update to 4.9.12-11.0.1
samba - addressed in versions 4.10.16-20.62, 4.17.5-0
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.0
samba-ceph - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-winbind-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-winbind - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-libs-python3-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-libs-python3 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-libs-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-libs - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-debugsource - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libndr-standard0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-passdb0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-passdb0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-hostconfig0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-hostconfig0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-errors0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-errors0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-credentials0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-credentials0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libnetapi0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libnetapi0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libndr1-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libndr1 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-client-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libndr-standard0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libndr-nbt0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libndr-nbt0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libndr-krb5pac0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libndr-krb5pac0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libdcerpc0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libdcerpc0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libdcerpc-binding0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libdcerpc-binding0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
ctdb-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
ctdb - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-util0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-client - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba-ceph-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libwbclient0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libwbclient0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libtevent-util0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libtevent-util0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsmbldap2-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsmbldap2 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsmbconf0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsmbconf0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsmbclient0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsmbclient0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamdb0-debuginfo - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamdb0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
libsamba-util0 - update to 4.13.13+git.545.5897c2d94f3-3.12.1
samba - addressed in versions 4.15.9-0.fc35, 4.16.4-0.fc36, 4.16.4-0.fc37
net-fs/samba - update to 4.18.4
python3-qrcode - update to 5.1-12
python3-qrcode-core - update to 5.1-12
bind-dyndb-ldap - update to 11.6-4

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17049

• Security Features in Microsoft Kerberos
• SUSE update for samba and ldb
• Amazon Linux AMI update for samba
• SUSE update for ldb, samba
• Red Hat Enterprise Linux 9 update for krb5
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Gentoo update for Samba
• Multiple vulnerabilities in Red Hat OpenShift Container Platform release 4.13
• Red Hat Enterprise Linux 8 update for the idm:DL1 module
• Red Hat Enterprise Linux 8.6 Extended Update Support update for the idm:DL1 module
• Red Hat Enterprise Linux 8.8 Extended Update Support update for the idm:DL1 module
• Red Hat Enterprise Linux 8.6 Extended Update Support update for krb5
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Amazon Linux AMI update for samba
• Fedora 37 update for libldb, samba
• Fedora 36 update for libldb, samba
• Fedora 35 update for libldb, samba
• Anolis OS update for idm:DL1 module
• Multiple vulnerabilities in IBM webMethods Managed File Transfer
• Multiple vulnerabilities in IBM Application Gateway