CVE-2020-14303 log
Source |
|
Severity | High |
Remote | Yes |
Type | Denial of service |
Description | A flaw was found in the AD DC NBT server in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4. A samba user could send an empty UDP packet to cause the samba server to crash. |
Group | Package | Affected | Fixed | Severity | Status | Ticket |
---|---|---|---|---|---|---|
AVG-1202 | samba | 4.12.3-2 | 4.12.6-1 | High | Fixed |
Notes |
---|
The NBT server (UDP port 137) is provided by nmbd in the file-server configuration, which is not impacted by this issue. In the AD DC, the NBT server can be disabled with 'disable netbios = yes'. |