{
  "cveId": "CVE-2020-25720",
  "url": "https://patchblox.com/security/cve/CVE-2020-25720",
  "summary": "CVE-2020-25720 is fixed in 55 products on 1 platform, first by ALAS2023-2023-206, released June 5, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "samba: A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Direct...",
  "description": "A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object\u0027s creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the \u0027creator owner.\u0027 The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.",
  "published": "2023-06-05T16:39:00Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00494,
  "epssPercentile": 0.42637,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libnetapi",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "libnetapi-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "libnetapi-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "libsmbclient",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "libsmbclient-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "libsmbclient-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "libwbclient",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "libwbclient-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "libwbclient-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-samba",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-samba-dc",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-samba-dc-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-samba-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-samba-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-samba-test",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "2:4.17.8\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2020-25720",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2020-25720",
      "released": "2024-11-17T11:15:04Z"
    },
    {
      "platform": "linux",
      "product": "samba",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "2:4.17.8\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2020-25720",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2020-25720",
      "released": "2024-11-17T11:15:04Z"
    },
    {
      "platform": "linux",
      "product": "samba",
      "release": "Debian 14",
      "fixedVersion": "2:4.17.8\u002Bdfsg-1",
      "fix": "DEBIAN-CVE-2020-25720",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2020-25720",
      "released": "2024-11-17T11:15:04Z"
    },
    {
      "platform": "linux",
      "product": "samba",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-client",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-client-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-client-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-client-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-common",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-common-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-common-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-common-tools",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-common-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-dc-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-dc-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-dcerpc",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-dcerpc-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-debugsource",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-devel",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-krb5-printing",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-krb5-printing-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-ldb-ldap-modules",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-ldb-ldap-modules-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-pidl",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-test",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-test-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-test-libs",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-test-libs-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-tools",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-usershares",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-vfs-iouring",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-vfs-iouring-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-winbind",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-winbind-clients",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-winbind-clients-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-winbind-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-winbind-krb5-locator",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-winbind-krb5-locator-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-winbind-modules",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    },
    {
      "platform": "linux",
      "product": "samba-winbind-modules-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "2:4.17.8-0.amzn2023.0.2",
      "fix": "ALAS2023-2023-206",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-206",
      "released": "2023-06-05T16:39:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}