CVE-2020-10745
high-risk
Published 2020-07-07
A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.
Do I need to act?
!
19.7% chance of exploitation in next 30 days
EPSS score — higher than 80% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10
High
NETWORK
/ LOW complexity
Affected Products (5)
Affected Vendors
References (16)
Third Party Advisory
https://security.gentoo.org/glsa/202007-15
Vendor Advisory
https://www.samba.org/samba/security/CVE-2020-10745.html
Third Party Advisory
https://security.gentoo.org/glsa/202007-15
Vendor Advisory
https://www.samba.org/samba/security/CVE-2020-10745.html
52
/ 100
high-risk
Severity
26/34 · High
Exploitability
14/34 · Moderate
Exposure
12/34 · Low