UBUNTU-CVE-2020-10704

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2020-10704

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-10704.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2020-10704

Upstream

CVE-2020-10704

Downstream

USN-4341-1

USN-4341-2

Related

Published

2020-04-28T00:00:00Z

Modified

2026-04-22T13:57:47.333602Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user can cause a stack overflow leading to a denial of service. The highest threat from this vulnerability is to system availability. This issue affects all samba versions before 4.10.15, before 4.11.8 and before 4.12.2.

References

Affected packages

Ubuntu:Pro:14.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6?arch=source&distro=trusty/esm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6

Affected versions

2:3.*

2:3.6.18-1ubuntu3

2:4.*

2:4.0.10+dfsg-4ubuntu2

2:4.0.13+dfsg-1ubuntu1

2:4.1.3+dfsg-2ubuntu2

2:4.1.3+dfsg-2ubuntu3

2:4.1.3+dfsg-2ubuntu4

2:4.1.3+dfsg-2ubuntu5

2:4.1.6+dfsg-1ubuntu1

2:4.1.6+dfsg-1ubuntu2

2:4.1.6+dfsg-1ubuntu2.14.04.1

2:4.1.6+dfsg-1ubuntu2.14.04.2

2:4.1.6+dfsg-1ubuntu2.14.04.3

2:4.1.6+dfsg-1ubuntu2.14.04.4

2:4.1.6+dfsg-1ubuntu2.14.04.5

2:4.1.6+dfsg-1ubuntu2.14.04.7

2:4.1.6+dfsg-1ubuntu2.14.04.8

2:4.1.6+dfsg-1ubuntu2.14.04.9

2:4.1.6+dfsg-1ubuntu2.14.04.11

2:4.1.6+dfsg-1ubuntu2.14.04.12

2:4.1.6+dfsg-1ubuntu2.14.04.13

2:4.3.8+dfsg-0ubuntu0.14.04.2

2:4.3.9+dfsg-0ubuntu0.14.04.1

2:4.3.9+dfsg-0ubuntu0.14.04.3

2:4.3.11+dfsg-0ubuntu0.14.04.1

2:4.3.11+dfsg-0ubuntu0.14.04.2

2:4.3.11+dfsg-0ubuntu0.14.04.3

2:4.3.11+dfsg-0ubuntu0.14.04.4

2:4.3.11+dfsg-0ubuntu0.14.04.6

2:4.3.11+dfsg-0ubuntu0.14.04.7

2:4.3.11+dfsg-0ubuntu0.14.04.8

2:4.3.11+dfsg-0ubuntu0.14.04.9

2:4.3.11+dfsg-0ubuntu0.14.04.10

2:4.3.11+dfsg-0ubuntu0.14.04.11

2:4.3.11+dfsg-0ubuntu0.14.04.12

2:4.3.11+dfsg-0ubuntu0.14.04.13

2:4.3.11+dfsg-0ubuntu0.14.04.14

2:4.3.11+dfsg-0ubuntu0.14.04.16

2:4.3.11+dfsg-0ubuntu0.14.04.17

2:4.3.11+dfsg-0ubuntu0.14.04.19

2:4.3.11+dfsg-0ubuntu0.14.04.20

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm1

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm2

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm3

2:4.3.11+dfsg-0ubuntu0.14.04.20+esm4

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "libpam-smbpass",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "libsmbsharemodes0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "python-samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.14.04.20+esm6"
        }
    ],
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-10704.json"

Ubuntu:16.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.3.11+dfsg-0ubuntu0.16.04.26?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.3.11+dfsg-0ubuntu0.16.04.26

Affected versions

2:4.*

2:4.1.17+dfsg-4ubuntu2

2:4.1.20+dfsg-1ubuntu1

2:4.1.20+dfsg-1ubuntu2

2:4.1.20+dfsg-1ubuntu3

2:4.1.20+dfsg-1ubuntu5

2:4.3.3+dfsg-1ubuntu1

2:4.3.3+dfsg-1ubuntu2

2:4.3.3+dfsg-1ubuntu3

2:4.3.6+dfsg-1ubuntu1

2:4.3.8+dfsg-0ubuntu1

2:4.3.9+dfsg-0ubuntu0.16.04.1

2:4.3.9+dfsg-0ubuntu0.16.04.2

2:4.3.9+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.1

2:4.3.11+dfsg-0ubuntu0.16.04.3

2:4.3.11+dfsg-0ubuntu0.16.04.5

2:4.3.11+dfsg-0ubuntu0.16.04.6

2:4.3.11+dfsg-0ubuntu0.16.04.7

2:4.3.11+dfsg-0ubuntu0.16.04.8

2:4.3.11+dfsg-0ubuntu0.16.04.9

2:4.3.11+dfsg-0ubuntu0.16.04.10

2:4.3.11+dfsg-0ubuntu0.16.04.11

2:4.3.11+dfsg-0ubuntu0.16.04.12

2:4.3.11+dfsg-0ubuntu0.16.04.13

2:4.3.11+dfsg-0ubuntu0.16.04.15

2:4.3.11+dfsg-0ubuntu0.16.04.16

2:4.3.11+dfsg-0ubuntu0.16.04.17

2:4.3.11+dfsg-0ubuntu0.16.04.18

2:4.3.11+dfsg-0ubuntu0.16.04.19

2:4.3.11+dfsg-0ubuntu0.16.04.20

2:4.3.11+dfsg-0ubuntu0.16.04.21

2:4.3.11+dfsg-0ubuntu0.16.04.23

2:4.3.11+dfsg-0ubuntu0.16.04.24

2:4.3.11+dfsg-0ubuntu0.16.04.25

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ctdb",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "python-samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.3.11+dfsg-0ubuntu0.16.04.26"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-10704.json"

Ubuntu:18.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.7.6+dfsg~ubuntu-0ubuntu2.16?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.7.6+dfsg~ubuntu-0ubuntu2.16

Affected versions

2:4.*

2:4.6.7+dfsg-1ubuntu3

2:4.7.1+dfsg-1ubuntu1

2:4.7.3+dfsg-1ubuntu1

2:4.7.4+dfsg-1ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu1

2:4.7.6+dfsg~ubuntu-0ubuntu2

2:4.7.6+dfsg~ubuntu-0ubuntu2.2

2:4.7.6+dfsg~ubuntu-0ubuntu2.4

2:4.7.6+dfsg~ubuntu-0ubuntu2.5

2:4.7.6+dfsg~ubuntu-0ubuntu2.6

2:4.7.6+dfsg~ubuntu-0ubuntu2.7

2:4.7.6+dfsg~ubuntu-0ubuntu2.9

2:4.7.6+dfsg~ubuntu-0ubuntu2.10

2:4.7.6+dfsg~ubuntu-0ubuntu2.11

2:4.7.6+dfsg~ubuntu-0ubuntu2.13

2:4.7.6+dfsg~ubuntu-0ubuntu2.14

2:4.7.6+dfsg~ubuntu-0ubuntu2.15

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ctdb",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "libparse-pidl-perl",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "python-samba",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.7.6+dfsg~ubuntu-0ubuntu2.16"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-10704.json"

Ubuntu:20.04:LTS / samba

Package

Name: samba
Purl: pkg:deb/ubuntu/samba@2:4.11.6+dfsg-0ubuntu1.1?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:4.11.6+dfsg-0ubuntu1.1

Affected versions

2:4.*

2:4.10.7+dfsg-0ubuntu2

2:4.10.7+dfsg-0ubuntu3

2:4.11.1+dfsg-3ubuntu1

2:4.11.1+dfsg-3ubuntu2

2:4.11.1+dfsg-3ubuntu4

2:4.11.5+dfsg-1ubuntu1

2:4.11.5+dfsg-1ubuntu2

2:4.11.6+dfsg-0ubuntu1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "ctdb",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "libnss-winbind",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "libpam-winbind",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "libsmbclient",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "libwbclient0",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "python3-samba",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "registry-tools",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "samba",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "samba-common",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "samba-common-bin",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "samba-dsdb-modules",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "samba-libs",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "samba-testsuite",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "samba-vfs-modules",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "smbclient",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        },
        {
            "binary_name": "winbind",
            "binary_version": "2:4.11.6+dfsg-0ubuntu1.1"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-10704.json"