CVE-2020-10704CWE-674

A flaw was found when using samba as an Active Directory Domain Controller

High · published May 6, 2020

CVSS v3.1
7.5
EPSS
4%
Percentile
89.2
In the wild
Unconfirmed
What it is

A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03542 · 89.2th percentile
Weakness
CWE-674 · Uncontrolled Recursion
Published
2020-05-06T00:00Z
EPSS history
Timeline
  • 06 MAY 00:00Z
    A flaw was found when using samba as an Active Directory Domain Controller
    cvelistv5