CVE-2020-27840 PUBLISHED

A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.

EPSS 14.52% · 94.4th percentile

Risk Scores

EPSS Score
14.52%
94.4th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSldb0, 1:1.1.24-0ubuntu0.14.04.2, 1:1.1.24-0ubuntu0.14.04.1
Ubuntu:20.04:LTSldb0, 2:1.5.5-0ubuntu2, 2:2.0.7-4
Ubuntu:16.04:LTSldb0, *, *
Ubuntu:18.04:LTSldb2:1.1.29-2, 2:1.2.2-2, 2:1.2.3-1

Timeline

References

Open in Interactive Console →