CVE-2020-25722

moderate-risk

Published 2022-02-18

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.

Do I need to act?

0.41% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 8.8/10 High

NETWORK / LOW complexity

Affected Products (10)

Samba

Debian Linux

Fedora

Ubuntu Linux

Affected Vendors

Debian Samba Canonical Fedoraproject

References (6)

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2019764

https://security.gentoo.org/glsa/202309-06

Mitigation https://www.samba.org/samba/security/CVE-2020-25722.html

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=2019764

https://security.gentoo.org/glsa/202309-06

Mitigation https://www.samba.org/samba/security/CVE-2020-25722.html

/ 100

moderate-risk

Severity 30/34 · Critical

Exploitability 2/34 · Minimal

Exposure 16/34 · Moderate