Vulnerability in Samba: CVE-2020-25719
Summary
CVE-2020-25719: A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. Affects samba across 2 version ranges.
< 4.13.17-r0
>= df33344d8eb40221d60c99931690703a11d91bc2, < db11778b57610e24324aa4342f89918f66157d71
Fixed in 4.13.17-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Samba is an open-source software suite that provides file and print services for various operating systems, including Windows. It includes an Active Directory Domain Controller (AD DC) component that allows Samba to act as a domain controller in a Windows network. The AD DC implementation in Samba supports Kerberos-based authentication, which is used for secure communication between clients and the domain controller. However, a vulnerability, identified as CVE-2020-25719, has been discovered in Samba's implementation of Kerberos name-based authentication.
Vulnerability Detail
The vulnerability arises from a flaw in the way Samba handles Kerberos name-based authentication. In certain scenarios, the Samba AD DC can become confused about the user a ticket represents if it does not strictly require a Kerberos PAC (Privilege Attribute Certificate) and always uses the Security Identifiers (SIDs) found within. This confusion can lead to a compromise of the entire domain. An attacker could exploit this vulnerability to impersonate users, gain unauthorized access to resources, and potentially take control of the domain.
How To Fix
Minimum fixed version
4.13.17-r0
This is the first release that contains the fix.
sudo apk add --upgrade sambaTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is recommended to apply the available fix by updating the Samba package.
Conclusion
The vulnerability in Samba's Kerberos name-based authentication implementation (CVE-2020-25719) can have severe security implications, potentially leading to a compromise of the entire domain. It is crucial to update the Samba package to the fixed versions mentioned in the 'how_to_fix' section to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for samba →
FAQ
Samba is an open-source software suite that provides file and print services for various operating systems, including Windows. It includes an Active Directory Domain Controller (AD DC) component that allows Samba to act as a domain controller in a Windows network.
Kerberos is a network authentication protocol that provides secure communication between clients and servers. It uses tickets to authenticate users and verify their identities.
The vulnerability in Samba's Kerberos implementation can lead to a compromise of the entire domain. An attacker could impersonate users, gain unauthorized access to resources, and potentially take control of the domain.
Yes, all versions of Samba prior to the fixed versions mentioned in the 'how_to_fix' section are affected by this vulnerability.
No, there is no known workaround for this vulnerability. It is recommended to apply the available fix by updating the Samba package.
Related vulnerabilities
Recent vulnerabilities recorded for samba.
