CVE-2020-10745

A flaw was found in all Samba versions before 4.10.17, before 4.11.11 and before 4.12.4 in the way it processed NetBios over TCP/IP. This flaw allows a remote attacker could to cause the Samba server to consume excessive CPU use, resulting in a denial of service. This highest threat from this vulnerability is to system availability.

• CWE-400

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1849491%3B
• https://lists.debian.org/debian-lts-announce/2020/11/msg00041.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/
• https://security.gentoo.org/glsa/202007-15Third Party Advisory
• https://www.samba.org/samba/security/CVE-2020-10745.htmlVendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00030.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00054.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00002.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1849491%3B
• https://lists.debian.org/debian-lts-announce/2020/11/msg00041.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6YLNQ5GRXUKYRUAOFZ4DUBVN4SMTL6Q2/
• https://security.gentoo.org/glsa/202007-15Third Party Advisory
• https://www.samba.org/samba/security/CVE-2020-10745.htmlVendor Advisory

Published

Jul 7, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1074<p>A remote code execution vulnerability exists when the Win…7.8
• CVE-2020-10740A vulnerability was found in Wildfly in versions before 20.0…7.5
• CVE-2020-10741Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10742A flaw was found in the Linux kernel. An index buffer overfl…6
• CVE-2020-10743It was discovered that OpenShift Container Platform's (OCP) …4.3
• CVE-2020-10744An incomplete fix was found for the fix of the flaw CVE-2020…5
• CVE-2020-10746A flaw was found in Infinispan (org.infinispan:infinispan-se…6.1
• CVE-2020-10747Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10748A flaw was found in Keycloak's data filter, in version 10.0.…6.1
• CVE-2020-10749A vulnerability was found in all versions of containernetwor…6
• CVE-2020-1075An information disclosure vulnerability exists when Windows …5.5
• CVE-2020-10750Sensitive information written to a log file vulnerability wa…5.5