HighFix available
samba — security advisory
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.
- Products
- samba
- Affected versions
- Not specified
- Fixed versions
- 2:4.13.14+dfsg-1
- CVEs
- CVE-2020-25722
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 13:30 UTC · Revision 1
Source evidence
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.
osv:DEBIAN-CVE-2020-25722
samba
Fixed versions: 2:4.13.14+dfsg-1
samba
Fixed versions: 2:4.13.14+dfsg-1
samba
Fixed versions: 2:4.13.14+dfsg-1
Complete source record
{
"id": "76a5cab6a20f7e77a7b8e5d1164c5778d267506221c7cdade03257d7ea33147f",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2020-25722",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2020-25722",
"summary": "Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.",
"evidence": "osv:DEBIAN-CVE-2020-25722",
"products": [
{
"name": {
"value": "samba",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:4.13.14+dfsg-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "samba",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:4.13.14+dfsg-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "samba",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:4.13.14+dfsg-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "DEBIAN-CVE-2020-25722",
"aliases": [
"DEBIAN-CVE-2020-25722"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.13.14+dfsg-1"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-25722.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.13.14+dfsg-1"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-25722.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:4.13.14+dfsg-1"
}
]
}
],
"package": {
"name": "samba",
"purl": "pkg:deb/debian/samba?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2020-25722.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-26T12:02:30.874215031Z",
"provider": "osv",
"upstream": [
"CVE-2020-25722"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2020-25722"
]
},
"related_cves": [
{
"value": "CVE-2020-25722",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 452405,
"published_at": "2022-02-18T18:15:08.643+00:00"
}