CVE-2020-10700: Use After Free
A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause denial of service. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-10700?
CVE-2020-10700 has a severity rating that indicates it can lead to denial of service for impacted Samba Active Directory servers.
How do I fix CVE-2020-10700?
To fix CVE-2020-10700, upgrade to Samba version 4.10.15, 4.11.8, or 4.12.2 or later.
Which versions of Samba are affected by CVE-2020-10700?
CVE-2020-10700 affects all Samba versions prior to 4.10.15, 4.11.8, and 4.12.2.
Can CVE-2020-10700 be exploited by remote attackers?
Yes, a malicious user within a Samba Active Directory could exploit CVE-2020-10700 to cause a denial of service.
Is CVE-2020-10700 applicable to Fedora or openSUSE?
Yes, Fedora versions 30, 31, and 32, as well as openSUSE Leap 15.2, are also affected by CVE-2020-10700.