High
Security advisory
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2020-25722
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 07:14 UTC · Revision 1
Source evidence
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.
osv:CVE-2020-25722
Complete source record
{
"id": "810eaf37bc49041c04529c9cc91b2208aeaaccd48af4e4cf13431a3821f888b1",
"url": "https://osv.dev/vulnerability/CVE-2020-25722",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2020-25722",
"summary": "Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.",
"evidence": "osv:CVE-2020-25722",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2020-25722",
"aliases": [
"CVE-2020-25722"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/samba-team/samba",
"type": "GIT",
"events": [
{
"introduced": "df33344d8eb40221d60c99931690703a11d91bc2"
},
{
"fixed": "db11778b57610e24324aa4342f89918f66157d71"
},
{
"introduced": "9b49519cae3e967af9ea48dc5fcfb6c145e31db4"
},
{
"fixed": "9312b1832e5a808a63fc7f9e7d6e70348cc9eb86"
},
{
"introduced": "fc8342bd26d1c55ca5780b427f675f31147b27f9"
},
{
"fixed": "7d0c030d4233974c4b9463dad44efdb05e6186f1"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.0.0"
},
{
"fixed": "4.13.14"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.14.0"
},
{
"fixed": "4.14.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.15.0"
},
{
"fixed": "4.15.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"ldb-2.3.2",
"samba-4.14.9",
"samba-4.15.1",
"ldb-2.4.1",
"ldb-2.3.1",
"samba-4.14.8",
"samba-4.15.0",
"samba-4.14.7",
"samba-4.14.6",
"samba-4.14.5",
"samba-4.14.3",
"samba-4.14.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25722.json"
}
}
],
"modified": "2026-10-24T10:30:50.663040893Z",
"provider": "osv",
"references": [
"https://security.gentoo.org/glsa/202309-06",
"https://www.samba.org/samba/security/CVE-2020-25722.html",
"https://bugzilla.redhat.com/show_bug.cgi?id=2019764"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:21.04:*:*:*:*:*:*:*",
"cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*"
],
"vendor_product": "canonical:ubuntu_linux",
"extracted_events": [
{
"range": [
{
"introduced": "18.04"
},
{
"last_affected": "18.04"
},
{
"introduced": "20.04"
},
{
"last_affected": "20.04"
},
{
"introduced": "21.04"
},
{
"last_affected": "21.04"
},
{
"introduced": "21.10"
},
{
"last_affected": "21.10"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
},
{
"introduced": "10.0"
},
{
"last_affected": "10.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*"
],
"vendor_product": "fedoraproject:fedora",
"extracted_events": [
{
"range": [
{
"introduced": "33"
},
{
"last_affected": "33"
},
{
"introduced": "34"
},
{
"last_affected": "34"
},
{
"introduced": "35"
},
{
"last_affected": "35"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2020-25722",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 437298,
"published_at": "2022-02-18T18:15:08.643+00:00"
}