CVE:CVE-2020-10760
CNNVD:CNNVD-202007-122
Samba是Samba团队的一套可使UNIX系列的操作系统与微软Windows操作系统的SMB/CIFS网络协议做连结的自由软件。该软件支持共享打印机、互相传输资料文件等。
Samba 4.10.17之前版本、4.11.11之前版本和4.12.4之前版本的AD DC Global Catalog中存在资源管理错误漏洞。攻击者可利用该漏洞造成Samba崩溃。
solution:Upgrade samba samba to a higher version than 4.10.17,4.11.11,4.12.4,and avoid the version [4.5.0,4.10.17),[4.11.0,4.11.11),[4.12.0,4.12.4); Upgrade canonical ubuntu_linux to a higher version than 18.04,19.10,20.04,and avoid the version 18.04,19.10,20.04; Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade fedoraproject fedora to a higher version than 31,and avoid the version 31