CVE-2020-14323: Input Validation
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.
Other sources
As per upstream advisory:
winbind in version 3.6 and later implements a request to translate multiple Windows SIDs into names in one request. This was done for performance reasons: The Microsoft RPC call domain controllers offer to do this translation offer this batch operation, so it was an obvious extension to also offer this batch operation on the winbind unix domain stream socket that is available to local processes on the Samba server.
Due to improper input validation a hand-crafted packet can make winbind perform a NULL pointer dereference and thus crash.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-14323?
CVE-2020-14323 is a null pointer dereference flaw in Samba's Winbind service that can be exploited by a local user to crash the service and cause a denial of service.
Which versions of Samba are affected by CVE-2020-14323?
Versions before 4.11.15, before 4.12.9, and before 4.13.1 of Samba are affected by CVE-2020-14323.
What is the severity of CVE-2020-14323?
CVE-2020-14323 has a severity rating of medium, with a CVSS score of 5.5.
How can a local user exploit CVE-2020-14323?
A local user can exploit CVE-2020-14323 to crash the Winbind service in Samba, causing a denial of service.
Where can I find more information about CVE-2020-14323?
You can find more information about CVE-2020-14323 on the Samba website, Red Hat Bugzilla, and the Samba Git repository.