CVE-2020-25718
Published: 9 November 2021
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrator tickets.
Priority
CVSS 3 base score: 8.8
Status
Package | Release | Status |
---|---|---|
samba Launchpad, Ubuntu, Debian |
bionic |
Ignored
|
focal |
Released
(2:4.13.14+dfsg-0ubuntu0.20.04.1)
|
|
hirsute |
Released
(2:4.13.14+dfsg-0ubuntu0.21.04.1)
|
|
impish |
Released
(2:4.13.14+dfsg-0ubuntu0.21.10.1)
|
|
jammy |
Released
(2:4.13.14+dfsg-0ubuntu1)
|
|
trusty |
Needs triage
|
|
upstream |
Released
(4.13.14)
|
|
xenial |
Needs triage
|
Notes
Author | Note |
---|---|
mdeslaur | Fixing this in Ubuntu 18.04 LTS would require substantial code backports. We will not be fixing this issue in Ubuntu 18.04 LTS. In environments where this is of concern, we recommend updating to a more recent Ubuntu version. |
References
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25718
- https://www.samba.org/samba/security/CVE-2020-25718.html
- https://www.samba.org/samba/history/samba-4.13.14.html
- https://ubuntu.com/security/notices/USN-5142-1
- NVD
- Launchpad
- Debian