CVE-2020-25718
Published: 9 November 2021
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrator tickets.
Priority
Medium
CVSS 3 base score: 8.8
Status
| Package | Release | Status |
|---|---|---|
|
samba Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
| focal |
Released
(2:4.13.14+dfsg-0ubuntu0.20.04.1)
|
|
| hirsute |
Released
(2:4.13.14+dfsg-0ubuntu0.21.04.1)
|
|
| impish |
Released
(2:4.13.14+dfsg-0ubuntu0.21.10.1)
|
|
| jammy |
Released
(2:4.13.14+dfsg-0ubuntu1)
|
|
| trusty |
Needs triage
|
|
| upstream |
Released
(4.13.14)
|
|
| xenial |
Needs triage
|
Notes
| Author | Note |
|---|---|
| mdeslaur | Fixing this in Ubuntu 18.04 LTS would require substantial code backports. We will not be fixing this issue in Ubuntu 18.04 LTS. In environments where this is of concern, we recommend updating to a more recent Ubuntu version. |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25718
- https://www.samba.org/samba/security/CVE-2020-25718.html
- https://www.samba.org/samba/history/samba-4.13.14.html
- https://ubuntu.com/security/notices/USN-5142-1
- NVD
- Launchpad
- Debian