CVE:CVE-2020-25719
CNNVD:CNNVD-202111-783
Samba是用于 Linux 和 Unix 的标准 Windows 互操作性程序套件。
Samba存在竞争条件问题漏洞，该漏洞源于在作为 Active Directory 域控制器的 Samba 实现基于 Kerberos 名称的身份验证的方式中发现了一个缺陷。如果 Samba AD DC 不严格要求 Kerberos PAC 并始终使用其中找到的 SID，则它可能会对票证代表的用户感到困惑。结果可能包括整个域的妥协。
solution:Upgrade samba samba to a higher version than 4.13.14,4.14.10,4.15.2,and avoid the version [4.0.0,4.13.14),[4.14.0,4.14.10),[4.15.0,4.15.2); Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade fedoraproject fedora to a higher version than 33,34,35,and avoid the version 33,34,35; Upgrade canonical ubuntu_linux to a higher version than 20.04,21.04,21.10,and avoid the version 20.04,21.04,21.10; Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_eus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_ibm_z_systems to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_for_ibm_z_systems_eus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_power_big_endian to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_for_power_little_endian to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_for_scientific_computing to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.2,8.4,and avoid the version 8.2,8.4; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0