CVE-2020-14323
29.10.2020, 20:15
A null pointer dereference flaw was found in samba's Winbind service in versions before 4.11.15, before 4.12.9 and before 4.13.1. A local user could use this flaw to crash the winbind service causing denial of service.Enginsight
| Vendor | Product | Version |
|---|---|---|
| samba | samba | 3.6.0 ≤ 𝑥 < 4.11.15 |
| samba | samba | 4.12.0 ≤ 𝑥 < 4.12.9 |
| samba | samba | 4.13.0 ≤ 𝑥 < 4.13.1 |
| opensuse | leap | 15.1 |
| opensuse | leap | 15.2 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| samba |
|
Common Weakness Enumeration
- CWE-170 - Improper Null TerminationThe software does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.
- CWE-476 - NULL Pointer DereferenceA NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
References