CVE-2020-14383: Medium severity samba vulnerability
A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.
Other sources
As per upstream advisory:
Some DNS records (such as MX and NS records) usually contain data in the additional section. Samba's dnsserver RPC pipe (which is an administrative interface not used in the DNS server itself) made an error in handling the case where there are no records present: instead of noticing the lack of records, it dereferenced uninitialised memory, causing the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non-admin attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-14383?
CVE-2020-14383 is a vulnerability found in Samba's DNS server that allows an authenticated user to crash the RPC server.
How does CVE-2020-14383 affect Samba?
CVE-2020-14383 affects Samba versions 4.0.0 to 4.11.15, 4.12.0 to 4.12.9, and 4.13.0 to 4.13.1.
What is the severity of CVE-2020-14383?
CVE-2020-14383 has a severity rating of 6.5 (medium).
How can an authenticated user exploit CVE-2020-14383?
An authenticated user can exploit CVE-2020-14383 by using the vulnerability to crash the RPC server.
Are there any remedies available for CVE-2020-14383?
Yes, updating Samba to versions 4.11.15, 4.12.9, or 4.13.1 will address the vulnerability.