CVE-2020-10730: samba +4 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-10730

CVSS 6.5 · Medium EPSS 2,4%

Kerentanan Use After Free pada samba, redhat storage +3 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A NULL pointer dereference, or possible use-after-free flaw was found in Samba AD LDAP server in versions before 4.10.17, before 4.11.11 and before 4.12.4. Although some versions of Samba shipped with Red Hat Enterprise Linux do not support Samba in AD mode, the affected code is shipped with the libldb package. This flaw allows an authenticated user to possibly trigger a use-after-free or NULL pointer dereference. The highest threat from this vulnerability is to system availability.

Rincian

Terbit di NVD: 7 Juli 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-416: Use After Free
CWE-476: NULL Pointer Dereference
EPSS (30 hari): 2,4% peluang dieksploitasi; lebih tinggi dari 83,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
samba	samba	Versi 4.5.0 hingga sebelum 4.10.17
samba	samba	Versi 4.11.0 hingga sebelum 4.11.11
samba	samba	Versi 4.12.0 hingga sebelum 4.12.4
redhat	storage	Versi 3.0
opensuse	leap	Versi 15.1
opensuse	leap	Versi 15.2
fedoraproject	fedora	Versi 31
debian	debian linux	Versi 9.0
debian	debian linux	Versi 10.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.samba.org/samba/security/CVE-2020-10730.html advisory vendor
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html mailing list · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html mailing list · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00000.html mailing list · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html issue tracking · advisory pihak ketiga
https://security.gentoo.org/glsa/202007-15 advisory pihak ketiga
https://www.debian.org/security/2021/dsa-4884 advisory pihak ketiga
https://bugzilla.redhat.com/show_bug.cgi?id=1849489%3B
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YLNQ5GRXUKYR...

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.