USN-4454-1: Samba vulnerability

Published Aug 10, 2020

Updated

Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packets when being used as a AD DC NBT server. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service.

Affected Software

0 affected components

Event History

Feb 23, 2026

Advisory Published

via Ubuntu·07:27 PM

Data Sourced

via Ubuntu·07:27 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2020-14303

Frequently Asked Questions

What is the vulnerability ID for the Samba vulnerability?

The vulnerability ID for the Samba vulnerability is USN-4454-1.

What is the impact of the Samba vulnerability?

The Samba vulnerability can cause Samba to crash, resulting in a denial of service.

Which versions of Samba are affected by the vulnerability?

The vulnerability affects Samba versions 4.11.6+dfsg-0ubuntu1.4, 4.7.6+dfsg~ubuntu-0ubuntu2.18, and 4.3.11+dfsg-0ubuntu0.16.04.29.

How can the Samba vulnerability be exploited?

The Samba vulnerability can be exploited remotely by sending certain empty UDP packets when Samba is being used as an AD DC NBT server.

How can I fix the Samba vulnerability?

To fix the Samba vulnerability, update to the latest version of Samba as specified in the Ubuntu Security Notice USN-4454-1.