CVE-2020-25717
Public on 2022-02-02
Modified on 2023-01-18
Description
A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.
Severity
Important
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 1 | samba | 2022-02-10 | ALAS-2022-1564 | Fixed |
| Amazon Linux 2 - Core | samba | 2022-02-03 | ALAS2-2022-1746 | Fixed |
| Amazon Linux 2023 | samba | Pending Fix |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 8.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| NVD | CVSSv2 | 8.5 | AV:N/AC:L/Au:S/C:C/I:C/A:N |
| NVD | CVSSv3 | 8.1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |