Critical Memory Corruption Vulnerability in Samba Package
Summary
ALPINE-CVE-2020-27840: A flaw was found in samba. Affects samba versions < 4.12.14-r0. Fixed in 4.12.14-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Samba is an open-source software suite that enables file and print services to SMB/CIFS clients. It allows for seamless interoperability between Linux/Unix servers and Windows-based clients. Samba is widely used in enterprise environments for sharing files and printers across different operating systems. However, it is susceptible to vulnerabilities that can compromise system availability and security.
Vulnerability Detail
A flaw was discovered in Samba where spaces in a string surrounding a domain name (DN) are not properly handled. Instead of being ignored, these spaces can lead to the creation of invalid DN strings. This results in writing a zero-byte into out-of-bounds memory, causing a crash and potentially leading to denial of service. The vulnerability is identified as CVE-2020-27840 and has a CVSS score of 7.5, indicating a high severity level.
How To Fix
Minimum fixed version
4.12.14-r0
This is the first release that contains the fix.
sudo apk add --upgrade sambaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid using domain names with leading or trailing spaces until the package is updated. This may help mitigate the risk of triggering the vulnerability.
Conclusion
The Samba vulnerability identified as CVE-2020-27840 poses a significant risk to system availability due to improper handling of domain names. It is crucial for users to update their Samba installations to the latest patched versions to mitigate this risk. Additionally, utilizing tools like Vulert can help in monitoring vulnerabilities in open-source software.
See every vulnerability recorded for samba →
FAQ
CVE-2020-27840 is a vulnerability in the Samba package that can lead to memory corruption and system crashes due to improper handling of spaces in domain names.
The vulnerability has a CVSS score of 7.5, indicating a high severity level that can impact system availability.
All versions of Samba prior to the patched versions (4.12.14-r0, 4.13.7-r0, and 4.14.2-r0) across various Alpine Linux releases are affected.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
If immediate updates are not possible, avoid using domain names with spaces until the vulnerability is patched.
References
Related vulnerabilities
Recent vulnerabilities recorded for samba.
