CVE-2020-25722

Description

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.

CVSS Metrics

• v3.1•HIGH•Score: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
• v2.0•MEDIUM•Score: 6.5AV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 1.61%• Percentile: 75%

Techniques & Countermeasures

• CWE-863•Incorrect Authorization

  The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Affected Systems

• alpine•samba

  ≥ 4.0.0, < 4.13.17-r0 | ≥ 4.0.0, < 4.14.12-r0 | ≥ 4.0.0, < 4.15.2-r0 | ≥ 4.0.0, < 4.15.2-r0 | ≥ 4.0.0, < 4.15.2-r0 | ≥ 4.0.0, < 4.15.2-r0 | ≥ 4.0.0, < 4.15.2-r0 | ≥ 4.0.0, < 4.15.2-r0 | ≥ 4.0.0, < 4.15.2-r0 | ≥ 4.0.0, < 4.15.2-r0 | ≥ 4.0.0, < 4.15.2-r0 | ≥ 4.0.0, < 4.15.2-r0

• canonical•ubuntu_linux

  18.04 | 20.04 | 21.04 | 21.10

• debian•samba

  < 2:4.13.13+dfsg-1~deb11u2 | < 2:4.13.14+dfsg-1 | < 2:4.13.14+dfsg-1 | < 2:4.13.14+dfsg-1

• debian•debian_linux

  9.0 | 10.0

• fedoraproject•fedora

  33 | 34 | 35

• samba•samba

  ≥ 4.0.0, < 4.13.14 | ≥ 4.14.0, < 4.14.10 | ≥ 4.15.0, < 4.15.2

References (5)

• https://bugzilla.redhat.com/show_bug.cgi?id=2019764
• https://www.samba.org/samba/security/CVE-2020-25722.html
• https://security.gentoo.org/glsa/202309-06
• https://security.alpinelinux.org/vuln/CVE-2020-25722
• https://security-tracker.debian.org/tracker/CVE-2020-25722