VDB

CVE-2020-27840

CVE-2020-27840 PUBLISHED CVSS 7.5 HIGH

A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.

EPSS 3.83% · 90.0th percentile

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
3.83%
90.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSldb1:1.1.16-1ubuntu0.1, 1:1.1.24-0ubuntu0.14.04.1, 1:1.1.24-0ubuntu0.14.04.2
Ubuntu:20.04:LTSldb2:2.0.10-0ubuntu0.20.04.2, 2:2.0.10-0ubuntu0.20.04.1, 2:2.0.8-1ubuntu1
Ubuntu:16.04:LTSldb2:1.1.21-1, 0, 2:1.1.20-2
Ubuntu:18.04:LTSldb0, 2:1.2.3-1ubuntu0.1, 2:1.2.3-1

Timeline

  • Mar 24, 2021 CVE Published
  • May 13, 2021 EPSS Score
  • Sep 16, 2021 EPSS Score
  • Nov 17, 2021 EPSS Score
  • Jan 18, 2022 EPSS Score
  • Mar 21, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • Jul 24, 2022 EPSS Score
  • Nov 25, 2022 EPSS Score
  • Jan 26, 2023 EPSS Score
  • Mar 29, 2023 EPSS Score
  • Jul 31, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›