CVE-2020-25722

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.

References

Affected packages

Git / github.com/samba-team/samba

Affected ranges

Type

GIT

Repo

https://github.com/samba-team/samba

Events

Introduced

df33344d8eb40221d60c99931690703a11d91bc2

Fixed

db11778b57610e24324aa4342f89918f66157d71

Introduced

9b49519cae3e967af9ea48dc5fcfb6c145e31db4

Fixed

9312b1832e5a808a63fc7f9e7d6e70348cc9eb86

Introduced

fc8342bd26d1c55ca5780b427f675f31147b27f9

Fixed

7d0c030d4233974c4b9463dad44efdb05e6186f1

Database specific

{
    "versions": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.13.14"
        },
        {
            "introduced": "4.14.0"
        },
        {
            "fixed": "4.14.10"
        },
        {
            "introduced": "4.15.0"
        },
        {
            "fixed": "4.15.2"
        }
    ]
}

Affected versions

ldb-2.*

ldb-2.3.0

ldb-2.3.1

ldb-2.3.2

ldb-2.4.1

samba-4.*

samba-4.14.0

samba-4.14.1

samba-4.14.2

samba-4.14.3

samba-4.14.4

samba-4.14.5

samba-4.14.6

samba-4.14.7

samba-4.14.8

samba-4.14.9

samba-4.15.0

samba-4.15.1

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "10.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "33"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "34"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "35"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "18.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "20.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "21.04"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "21.10"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25722.json"