CVE-2020-14303

一、漏洞信息
 漏洞编号：[CVE-2020-14303](https://nvd.nist.gov/vuln/detail/CVE-2020-14303)
 漏洞归属组件：[samba](https://gitee.com/src-openeuler/samba)
 漏洞归属的版本：4.10.17
 CVSS V3.0分值：
  BaseScore：7.5 High
  Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
 漏洞简述：
  A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash.
 漏洞公开时间：2020-07-07 02:15
 漏洞创建时间：2020-10-30 15:56:10
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2020-14303
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=1851298; |  |
| samba |  https://www.samba.org/samba/security/CVE-2020-14303.html |  |
| security |  https://security.netapp.com/advisory/ntap-20200709-0003/ |  |
| lists |  https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/ |  |
| lists |  http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.html |  |
| lists |  http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.html |  |
| security |  https://security.gentoo.org/glsa/202007-15 |  |
| usn |  https://usn.ubuntu.com/4454-2/ |  |
| usn |  https://usn.ubuntu.com/4454-1/ |  |
| lists |  http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.html |  |
| lists |  https://lists.debian.org/debian-lts-announce/2020/11/msg00041.html |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  其它
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

无
</details>

二、漏洞分析结构反馈
 影响性分析说明：
  可能会导致samba服务崩溃，对可用性由较高影响
 openEuler评分：
  7.5
 Vector：CVSS：3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-20.03-LTS-SP1(4.11.12):

修复是否涉及abi变化(是/否)：
  1.openEuler-20.03-LTS-SP1(4.11.12):

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2020-1064

src-openEuler/samba

Content Risk Flag

Comments (2)

src-openEuler/samba .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2020-14303

Comments (2)

Search

src-openEuler/samba