All vulnerabilities

Servers and applications

CVE-2020-27840

A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.

Severity
High 7.5
Published
12 May 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.12.13, 4.13.6, 4.14.1
Sources
NVD

Affected software

SoftwareAffected versions
SambaServers and applications · cpe:a:samba:samba
  • From 4.0.0 before 4.12.13
  • From 4.13.0 before 4.13.6
  • From 4.14.0 before 4.14.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-27840
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-27840