VDB
CVE-2020-25722
CVE-2020-25722
PUBLISHED
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.
EPSS 0.41% · 61.8th percentile
Risk Scores
EPSS Score
0.41%
61.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:Pro:14.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9, 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8, 2:4.1.3+dfsg-2ubuntu5 |
| Ubuntu:20.04:LTS | samba | 2:4.11.6+dfsg-0ubuntu1.2, 0, 2:4.10.7+dfsg-0ubuntu2 |
| Ubuntu:Pro:16.04:LTS | samba | 2:4.3.11+dfsg-0ubuntu0.16.04.12, *, * |
| Ubuntu:18.04:LTS | samba | 2:4.7.6+dfsg~ubuntu-0ubuntu2.2, 2:4.7.6+dfsg~ubuntu-0ubuntu2.6, 2:4.7.6+dfsg~ubuntu-0ubuntu2.9 |
| Ubuntu:22.04:LTS | samba | *, 0, * |
Timeline
- Nov 9, 2021 CVE Published
- Feb 19, 2022 EPSS Score
- Apr 12, 2022 EPSS Score
- Jun 3, 2022 EPSS Score
- Jul 26, 2022 EPSS Score
- Sep 16, 2022 EPSS Score
- Dec 29, 2022 EPSS Score
- Feb 19, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 13, 2023 EPSS Score
- Jun 4, 2023 EPSS Score
- Jul 26, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-25722 third-party-advisory
- https://www.samba.org/samba/security/CVE-2020-25722.html third-party-advisory
- https://www.samba.org/samba/history/samba-4.13.14.html third-party-advisory
- https://ubuntu.com/security/notices/USN-5142-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-5174-1 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-25722 third-party-advisory