CVE-2020-14383

Katalog CVE

CVSS 6.5 · Medium EPSS 2,2%

Kerentanan Unchecked Error Condition pada samba, redhat enterprise linux. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.

Rincian

Terbit di NVD

2 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-391: Unchecked Error Condition

EPSS (30 hari)

2,2% peluang dieksploitasi; lebih tinggi dari 82,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.samba.org/samba/security/CVE-2020-14383.html advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1892636 issue tracking · patch · advisory pihak ketiga
• https://security.gentoo.org/glsa/202012-24 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html