Lucene search
CISACISA:7FB0A467C0EB89B6198A58418B43D50CHistorySep 21, 2020 - 12:00 a.m.
Samba Releases Security Update for CVE-2020-1472
2020-09-2100:00:00
us-cert.cisa.gov
48
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
The Samba Team has released a security update to address a critical vulnerability—CVE-2020-1472—in multiple versions of Samba. This vulnerability could allow a remote attacker to take control of an affected system.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Samba Security Announcement for CVE-2020-1472 and apply the necessary updates or workaround.
This product is provided subject to this Notification and this Privacy & Use policy.
Please share your thoughts.
We recently updated our anonymous product survey; we’d welcome your feedback.
Related
attackerkb
attackerkb
CVE-2020-1472
2020-08-17 00:00:00
CVE-2020-1472 aka Zerologon
2020-08-17 00:00:00
githubexploit
githubexploit
Exploit for Use of Insufficiently Random Values in Microsoft
2020-10-21 09:42:34
Exploit for Use of Insufficiently Random Values in Microsoft
2020-09-15 13:50:01
Exploit for Use of Insufficiently Random Values in Microsoft
2020-09-14 16:56:51
nessus
nessus
SUSE SLES15 Security Update : samba (SUSE-SU-2020:2719-1)
2020-12-09 00:00:00
Fedora 32 : 2:samba (2020-0be2776ed3)
2020-09-24 00:00:00
cisa
cisa
CERT/CC Releases Information on Critical Vulnerability in Microsoft Windows Netlogon Remote Protocol
2020-09-17 00:00:00
Microsoft Warns of Continued Exploitation of CVE-2020-1472
2020-10-29 00:00:00
Exploit for Netlogon Remote Protocol Vulnerability, CVE-2020-1472
2020-09-14 00:00:00
thn
thn
Detecting and Preventing Critical ZeroLogon Windows Server Vulnerability
2020-09-23 18:08:00
CISA and FBI Issue Warning About Rhysida Ransomware Double Extortion Attacks
2023-11-16 12:03:00
US Cyber Command Links 'MuddyWater' Hacking Group to Iranian Intelligence
2022-01-13 07:47:00
carbonblack
carbonblack
TAU Threat Advisory: Imminent Ransomware threat to U.S. Healthcare and Public Health Sector
2020-10-30 20:13:43
Risk Score 101: What to look for in a Risk Score
2020-11-19 18:20:13
Querying Windows Event Logs for Faster Investigation and Response
2020-11-12 16:00:34
threatpost
threatpost
APT Exploits Microsoft Zerologon Bug: Targets Japanese Companies
2020-11-19 14:34:36
New Adwind Variant Targets Windows, Chromium Credentials
2019-10-29 16:17:02
DHS Issues Dire Patch Warning for ‘Zerologon’
2020-09-21 19:29:21
metasploit
metasploit
Netlogon Weak Cryptographic Authentication
2020-09-17 18:28:53
freebsd
freebsd
samba -- Unauthenticated domain takeover via netlogon
2020-01-01 00:00:00
msrc
msrc
Attacks exploiting Netlogon vulnerability (CVE-2020-1472)
2020-10-29 07:00:00
Attacks exploiting Netlogon vulnerability (CVE-2020-1472)
2020-10-29 20:02:19
Attacks exploiting Netlogon vulnerability (CVE-2020-1472)
2020-10-29 07:00:00
debiancve
debiancve
CVE-2020-1472
2020-08-17 19:15:00
archlinux
archlinux
[ASA-202009-17] samba: access restriction bypass
2020-09-29 00:00:00
huawei
huawei
Security Advisory - Netlogon Elevation of Privilege Vulnerability
2020-11-05 00:00:00
checkpoint_advisories
checkpoint_advisories
Winlogon Privilege Escalation (CVE-2020-1472)
2020-11-04 00:00:00
Microsoft Netlogon Elevation of Privilege (CVE-2020-1472)
2020-09-21 00:00:00
ibm
ibm
suse
suse
Security update for samba (important)
2020-09-24 00:00:00
Security update for samba (important)
2020-09-25 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: samba-4.11.13-0.fc31
2020-10-04 01:26:52
[SECURITY] Fedora 33 Update: samba-4.13.0-11.fc33
2020-09-25 17:25:08
[SECURITY] Fedora 32 Update: samba-4.12.7-0.fc32
2020-09-23 17:13:53
redhatcve
redhatcve
CVE-2020-1472
2020-09-17 06:30:08
zdt
zdt
ZeroLogon - Netlogon Elevation of Privilege Exploit
2020-11-18 00:00:00
packetstorm
packetstorm
Zerologon Netlogon Privilege Escalation
2020-11-18 00:00:00
mscve
mscve
Netlogon Elevation of Privilege Vulnerability
2020-08-11 07:00:00
ubuntu
ubuntu
Samba vulnerability
2020-09-17 00:00:00
Samba update
2020-09-30 00:00:00
Samba vulnerability
2020-09-17 00:00:00
prion
prion
Privilege escalation
2020-08-17 19:15:00
krebs
krebs
Microsoft: Attackers Exploiting ‘ZeroLogon’ Windows Flaw
2020-09-24 17:00:51
talosblog
talosblog
Microsoft Netlogon exploitation continues to rise
2020-09-29 09:04:58
IR Q4 2023 trends: Significant increase in ransomware activity found in engagements, while education remains one of the most-targeted sectors
2024-01-24 13:00:04
Quarterly Report: Incident Response Trends in Q3 2022
2022-10-25 12:00:00
rapid7blog
rapid7blog
Are You Still Running End-of-Life Windows Servers?
2020-10-19 13:06:38
Metasploit Wrap-Up
2020-10-09 19:41:47
osv
osv
samba update
2020-09-30 13:44:33
CVE-2020-1472
2020-08-17 19:15:15
samba vulnerability
2020-09-17 11:03:22
ics
ics
#StopRansomware: BianLian Ransomware Group
2023-05-16 12:00:00
#StopRansomware: Rhysida Ransomware
2023-11-15 12:00:00
#StopRansomware: Cuba Ransomware
2023-01-05 12:00:00
mageia
mageia
Updated samba packages fix security vulnerability
2020-09-30 13:01:40
cbl_mariner
cbl_mariner
CVE-2020-1472 affecting package samba for versions less than 4.12.5-4
2024-04-18 21:06:34
securelist
securelist
The future of cyberconflicts
2020-12-18 10:00:10
qualysblog
qualysblog
Microsoft Netlogon Vulnerability (CVE-2020-1472 – Zerologon) – Automatically Discover, Prioritize and Remediate Using Qualys VMDR®
2020-09-15 19:55:08
Conti Ransomware
2021-11-18 17:17:56
malwarebytes
malwarebytes
The story of ZeroLogon
2021-01-19 18:37:09
samba
samba
Unauthenticated domain takeover via netlogon ("ZeroLogon")
2020-09-18 00:00:00
cert
cert
cve
cve
CVE-2020-1472
2020-08-17 19:15:00
ubuntucve
ubuntucve
CVE-2020-1472
2020-09-16 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package samba version 4.11.13-alt1
2020-09-19 00:00:00
fireeye
fireeye
Unhappy Hour Special: KEGTAP and SINGLEMALT With a Ransomware Chaser
2020-10-28 00:00:00
trendmicroblog
trendmicroblog
veracode
veracode
Privilege Escalation
2020-10-08 13:45:57
hivepro
hivepro
Attacks, Vulnerabilities and Actors 19 June to 25 June 2023
2023-06-27 11:07:09
Are you a victim of the Conti Ransomware?
2021-09-23 13:47:51
Vulnerabilities & Threats that Matter 08 – 14th Aug
2022-08-16 05:00:49
alpinelinux
alpinelinux
CVE-2020-1472
2020-08-17 19:15:00
cisa_kev
cisa_kev
Microsoft Netlogon Privilege Escalation Vulnerability
2021-11-03 00:00:00
kitploit
kitploit
exploitdb
exploitdb
ZeroLogon - Netlogon Elevation of Privilege
2020-11-18 00:00:00
pentestpartners
pentestpartners
CVE-2020-1472/Zerologon. As an IT manager should I worry?
2020-09-23 05:05:06
mssecure
mssecure
Zerologon is now detected by Microsoft Defender for Identity
2020-11-30 17:00:20
redhat
redhat
(RHSA-2020:5439) Moderate: samba security and bug fix update
2020-12-15 09:01:31
(RHSA-2021:1647) Moderate: samba security, bug fix, and enhancement update
2021-05-18 05:44:25
amazon
amazon
Critical: samba
2021-01-12 22:51:00
Critical: samba
2021-01-05 23:34:00
Critical: samba
2021-06-16 20:36:00
oraclelinux
oraclelinux
samba security, bug fix, and enhancement update
2021-05-25 00:00:00
samba security and bug fix update
2020-12-16 00:00:00
centos
centos
ctdb, libsmbclient, libwbclient, samba security update
2020-12-18 00:19:11
rocky
rocky
samba security, bug fix, and enhancement update
2021-05-18 05:44:25
f5
f5
K93951507 : Multiple Samba vulnerabilities
2021-04-06 00:00:00
almalinux
almalinux
Moderate: samba security, bug fix, and enhancement update
2021-05-18 05:44:25
mmpc
mmpc
Zerologon is now detected by Microsoft Defender for Identity
2020-11-30 17:00:20
gentoo
gentoo
Samba: Multiple vulnerabilities
2020-12-24 00:00:00
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related for CISA:7FB0A467C0EB89B6198A58418B43D50C