MEDIUM🇵🇱 Wersja polska

CVE-2020-14383

CVSS 6.5v3.1pub. 2020-12-02upd. 2024-11-21

A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

  • Red Hat Enterprise Linux

    OS
    Redhat
    8.0

  • Samba

    APP
    Samba
    4.0.0 – 4.11.15 (excl.)4.12.0 – 4.12.9 (excl.)4.13.0 – 4.13.1 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2025-32463CRITICAL9.3⚠ KEVPL ✓same product

Sudo: eskalacja uprawnień do root poprzez opcję --chroot (CVE-2025-32463)

CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same product

SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego

CVE-2018-14667CRITICAL9.8⚠ KEVPL ✓same product

RCE przez EL injection w RichFaces Framework 3.X — brak uwierzytelnienia

CVE-2017-7494CRITICAL9.8⚠ KEVPL ✓same product

Samba — RCE poprzez wgranie i wykonanie biblioteki współdzielonej

CVE-2014-7169CRITICAL9.8⚠ KEVPL ✓same product

GNU Bash — niekompletna łatka Shellshock umożliwia command injection (CVE-2014-7169)