Test Kennung:	1.3.6.1.4.1.25623.1.0.108814
Kategorie:	Denial of Service
Titel:	Samba Multiple DoS Vulnerabilities (CVE-2020-10745, CVE-2020-14303)
Zusammenfassung:	Samba is prone to two denial-of-service vulnerabilities.
Beschreibung:	Summary: Samba is prone to two denial-of-service vulnerabilities. Vulnerability Insight: - Compression of replies to NetBIOS over TCP/IP name resolution and DNS packets (which can be supplied as UDP requests) can be abused to consume excessive amounts of CPU on the Samba AD DC (only). (CVE-2020-10745) - The AD DC NBT server in Samba 4.0 will enter a CPU spin and not process further requests once it receives an empty (zero-length) UDP packet to port 137. (CVE-2020-14303) Affected Software/OS: All Samba versions since 4.0.0. Solution: Update to version 4.10.17, 4.11.11, 4.12.4 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-10745 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/ https://security.gentoo.org/glsa/202007-15 https://bugzilla.redhat.com/show_bug.cgi?id=1849491; https://www.samba.org/samba/security/CVE-2020-10745.html https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html SuSE Security Announcement: openSUSE-SU-2020:0984 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html SuSE Security Announcement: openSUSE-SU-2020:1023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html SuSE Security Announcement: openSUSE-SU-2020:1313 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html Common Vulnerability Exposure (CVE) ID: CVE-2020-14303 https://bugzilla.redhat.com/show_bug.cgi?id=1851298; https://www.samba.org/samba/security/CVE-2020-14303.html https://usn.ubuntu.com/4454-1/ https://usn.ubuntu.com/4454-2/
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.