Input validation error in Samba - CVE-2020-14303
Published: July 2, 2020 / Updated: September 2, 2020
Vulnerability identifier: #VU29486
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Green
CVE-ID: CVE-2020-14303
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Affected software:
Samba
Gentoo Linux
Ubuntu
Opensuse
openEuler
Fedora
samba (Alpine package)
libldb
samba (Ubuntu package)
samba-devel
samba-debugsource
samba-help
samba-krb5-printing
samba-libs
samba-pidl
samba-test
samba-winbind
samba-winbind-clients
samba-winbind-krb5-locator
samba-winbind-modules
samba-debuginfo
samba
ctdb
ctdb-tests
libsmbclient
libsmbclient-devel
libwbclient
libwbclient-devel
python3-samba
python3-samba-dc
python3-samba-test
samba-client
samba-common
samba-common-tools
samba-dc
samba-dc-bind-dlz
samba-dc-provision
QNAP QTS
RoboHelp
Samba
Gentoo Linux
Ubuntu
Opensuse
openEuler
Fedora
samba (Alpine package)
libldb
samba (Ubuntu package)
samba-devel
samba-debugsource
samba-help
samba-krb5-printing
samba-libs
samba-pidl
samba-test
samba-winbind
samba-winbind-clients
samba-winbind-krb5-locator
samba-winbind-modules
samba-debuginfo
samba
ctdb
ctdb-tests
libsmbclient
libsmbclient-devel
libwbclient
libwbclient-devel
python3-samba
python3-samba-dc
python3-samba-test
samba-client
samba-common
samba-common-tools
samba-dc
samba-dc-bind-dlz
samba-dc-provision
QNAP QTS
RoboHelp
Detailed vulnerability description
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of UDp packets with 0 length data in Samba. A remote attacker can send a specially crafted UDP packet to port 137/TCP and perform a denial of service (DoS) attack.
How to mitigate CVE-2020-14303
Install updates from vendor's website.