CVE-2020-14318: Medium severity samba vulnerability
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.
Other sources
As per upstream advisory:
The SMB1/2/3 protocols have a concept of "ChangeNotify", where a client can request file name notification on a directory handle when a condition such as "new file creation" or "file size change" or "file timestamp update" occurs.
A missing permissions check on a directory handle requesting ChangeNotify meant that a client with a directory handle open only for FILEREADATTRIBUTES (minimal access rights) could be used to obtain change notify replies from the server. These replies contain information that should not be available to directory handles open for FILEREADATTRIBUTE only.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-14318?
CVE-2020-14318 has a medium severity level due to its potential for unauthorized access to file and directory information by authenticated users.
How do I fix CVE-2020-14318?
To fix CVE-2020-14318, upgrade Samba to versions 4.11.15, 4.12.9, or 4.13.1 as applicable.
What systems are affected by CVE-2020-14318?
CVE-2020-14318 affects various versions of Samba and Red Hat Enterprise Linux, particularly those prior to specified fixed versions.
What is the nature of the vulnerability in CVE-2020-14318?
CVE-2020-14318 is a permission-related vulnerability that allows authenticated users to access restricted file and directory information.
Can CVE-2020-14318 be exploited remotely?
CVE-2020-14318 requires authentication, meaning that exploitation is limited to users who have already obtained access to the system.