- Vulnerability/
- USN-4454-1
USN-4454-1: Samba vulnerability
First published: Mon Aug 10 2020(Updated: )
Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packets when being used as a AD DC NBT server. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/samba | <2:4.11.6+dfsg-0ubuntu1.4 | 2:4.11.6+dfsg-0ubuntu1.4 |
| =20.04 | ||
| All of | ||
| ubuntu/samba | <2:4.7.6+dfsg~ubuntu-0ubuntu2.18 | 2:4.7.6+dfsg~ubuntu-0ubuntu2.18 |
| =18.04 | ||
| All of | ||
| ubuntu/samba | <2:4.3.11+dfsg-0ubuntu0.16.04.29 | 2:4.3.11+dfsg-0ubuntu0.16.04.29 |
| =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2020-14303
- https://ubuntu.com/security/notices/USN-4454-2
- https://launchpad.net/ubuntu/+source/samba/2:4.11.6+dfsg-0ubuntu1.4
- https://launchpad.net/ubuntu/+source/samba/2:4.7.6+dfsg~ubuntu-0ubuntu2.18
- https://launchpad.net/ubuntu/+source/samba/2:4.3.11+dfsg-0ubuntu0.16.04.29
- https://ubuntu.com/security/notices/USN-4454-1 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for the Samba vulnerability?
The vulnerability ID for the Samba vulnerability is USN-4454-1.
What is the impact of the Samba vulnerability?
The Samba vulnerability can cause Samba to crash, resulting in a denial of service.
Which versions of Samba are affected by the vulnerability?
The vulnerability affects Samba versions 4.11.6+dfsg-0ubuntu1.4, 4.7.6+dfsg~ubuntu-0ubuntu2.18, and 4.3.11+dfsg-0ubuntu0.16.04.29.
How can the Samba vulnerability be exploited?
The Samba vulnerability can be exploited remotely by sending certain empty UDP packets when Samba is being used as an AD DC NBT server.
How can I fix the Samba vulnerability?
To fix the Samba vulnerability, update to the latest version of Samba as specified in the Ubuntu Security Notice USN-4454-1.
- agent/severity
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/title
- agent/description
- agent/tags
- agent/event
- collector/usn
- source/Ubuntu
- anchor-related/USN-4454-2
- agent/software-canonical-lookup
- agent/trending
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu ubuntu
- version/ubuntu ubuntu/20.04
- version/ubuntu ubuntu/18.04
- version/ubuntu ubuntu/16.04