VDB

CVE-2020-25722

CVE-2020-25722 PUBLISHED CVSS 8.800000190734863 HIGH

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.

EPSS 1.61% · 75.7th percentile

Risk Scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
1.61%
75.7th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSsamba2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9, 2:4.3.11+dfsg-0ubuntu0.14.04.20+esm8, 2:4.1.3+dfsg-2ubuntu5
Ubuntu:20.04:LTSsamba2:4.11.6+dfsg-0ubuntu1.2, 0, 2:4.10.7+dfsg-0ubuntu2
Ubuntu:Pro:16.04:LTSsamba2:4.3.11+dfsg-0ubuntu0.16.04.12, *, *
Ubuntu:18.04:LTSsamba2:4.7.6+dfsg~ubuntu-0ubuntu2.2, 2:4.7.6+dfsg~ubuntu-0ubuntu2.6, 2:4.7.6+dfsg~ubuntu-0ubuntu2.9
Ubuntu:22.04:LTSsamba*, 0, *

Timeline

  • Nov 9, 2021 CVE Published
  • Feb 19, 2022 EPSS Score
  • Apr 13, 2022 EPSS Score
  • Jun 4, 2022 EPSS Score
  • Jul 28, 2022 EPSS Score
  • Nov 10, 2022 EPSS Score
  • Jan 2, 2023 EPSS Score
  • Feb 24, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 18, 2023 EPSS Score
  • Jun 9, 2023 EPSS Score
  • Aug 1, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›