A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1892636 | Issue Tracking Patch Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html | |
| https://security.gentoo.org/glsa/202012-24 | Third Party Advisory |
| https://www.samba.org/samba/security/CVE-2020-14383.html | Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1892636 | Issue Tracking Patch Third Party Advisory |
| https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html | |
| https://security.gentoo.org/glsa/202012-24 | Third Party Advisory |
| https://www.samba.org/samba/security/CVE-2020-14383.html | Vendor Advisory |
Configurations
History
21 Nov 2024, 05:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1892636 - Issue Tracking, Patch, Third Party Advisory | |
| References | () https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html - | |
| References | () https://security.gentoo.org/glsa/202012-24 - Third Party Advisory | |
| References | () https://www.samba.org/samba/security/CVE-2020-14383.html - Vendor Advisory |
22 Apr 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2020-12-02 01:15
Updated : 2024-11-21 05:03
NVD link : CVE-2020-14383
Mitre link : CVE-2020-14383
CVE.ORG link : CVE-2020-14383
JSON object : View
Products Affected
redhat
- enterprise_linux
samba
- samba
CWE