CVE-2020-14323 : A null pointer dereference flaw was found in samba's Winbind service in versions

A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.

Published 2020-10-29 20:15:17

Updated 2024-07-03 01:36:18

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2020-14323

Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Samba » Samba
Versions from including (>=) 4.12.0 and before (<) 4.12.9
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Matching versions
Samba » Samba
Versions from including (>=) 4.13.0 and before (<) 4.13.1
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Matching versions
Samba » Samba
Versions from including (>=) 3.6.0 and before (<) 4.11.15
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 32
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 33
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.2
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2020-14323

Top countries where our scanners detected CVE-2020-14323

Top open port discovered on systems with this issue 445

IPs affected by CVE-2020-14323 192,325

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2020-14323!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2020-14323

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 25 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-14323

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	134c704f-9b21-4f2e-91b3-4a467353bcc0	2024-07-03
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2020-14323

CWE-170 Improper Null Termination

The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.

Assigned by: secalert@redhat.com (Secondary)
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2020-14323

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W6HM73N4NEGFW5GIJJGGP6ZZBS6GTXPB/

[SECURITY] Fedora 32 Update: samba-4.12.10-0.fc32 - package-announce - Fedora Mailing-Lists
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00008.html

[security-announce] openSUSE-SU-2020:1811-1: important: Security update
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1891685

1891685 – (CVE-2020-14323) CVE-2020-14323 samba: Unprivileged user can crash winbind
Issue Tracking;Third Party Advisory
https://security.netapp.com/advisory/ntap-20201103-0001/

October 2020 Samba Vulnerabilities in NetApp Products | NetApp Product Security
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00012.html

[security-announce] openSUSE-SU-2020:1819-1: important: Security update
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html

[SECURITY] [DLA 2463-1] samba security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JE2M4FE3N3EDXVG4UKSVFPL7SQUGFFDP/

[SECURITY] Fedora 33 Update: samba-4.13.1-0.fc33 - package-announce - Fedora Mailing-Lists
https://www.samba.org/samba/security/CVE-2020-14323.html

Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W6HM73N4NEGFW5GIJJGGP6ZZBS6GTXPB/

[SECURITY] Fedora 32 Update: samba-4.12.10-0.fc32 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html

[SECURITY] [DLA 3792-1] samba security update

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JE2M4FE3N3EDXVG4UKSVFPL7SQUGFFDP/

[SECURITY] Fedora 33 Update: samba-4.13.1-0.fc33 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://security.gentoo.org/glsa/202012-24

Samba: Multiple vulnerabilities (GLSA 202012-24) — Gentoo security
Third Party Advisory

CVEs referencing this url