CVE-2020-25718
Publication date 9 November 2021
Last updated 25 August 2025
Ubuntu priority
Description
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrator tickets.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| samba | ||
| 22.04 LTS jammy |
Fixed 2:4.13.14+dfsg-0ubuntu1
|
|
| 20.04 LTS focal |
Fixed 2:4.13.14+dfsg-0ubuntu0.20.04.1
|
|
| 18.04 LTS bionic | Ignored end of standard support | |
| 16.04 LTS xenial | Ignored end of ESM support, was ignored [changes too intrusive] | |
| 14.04 LTS trusty | Ignored end of ESM support, was ignored [changes too intrusive] |
Notes
mdeslaur
Fixing this in Ubuntu 18.04 LTS would require substantial code backports. We will not be fixing this issue in Ubuntu 18.04 LTS. In environments where this is of concern, we recommend updating to a more recent Ubuntu version.
Severity score breakdown
CVSS version: CVSS v3.0
Base score
8.8 · High
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
Related Ubuntu Security Notices (USN)
- USN-5142-1
- Samba vulnerabilities
- 11 November 2021