Medium severity · published Dec 2, 2020
CVE-2020-14383
A flaw was found in samba's DNS server
6.5
CVSS
2.2%
EPSS
No
On KEV
Description
A flaw was found in samba's DNS server. An authenticated user could use this flaw to the RPC server to crash. This RPC server, which also serves protocols other than dnsserver, will be restarted after a short delay, but it is easy for an authenticated non administrative attacker to crash it again as soon as it returns. The Samba DNS server itself will continue to operate, but many RPC services will not.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
8.0 · source: NVD
SA
Samba · Samba
4.0.0 before 4.11.15; 4.12.0 before 4.12.9; 4.13.0 before 4.13.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-14383
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-14383
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1892636
lists.debian.org
https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html
Third Party Advisory
https://security.gentoo.org/glsa/202012-24
Vendor Advisory
https://www.samba.org/samba/security/CVE-2020-14383.html
More from Enterprise Linux
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2018-14667
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.0
CVE-2021-40438
mod_proxy SSRF