Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2020-1472

critical

CVE-2020-1472

samba: Netlogon elevation of privilege vulnerability (Zerologon)

Published Modified
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Trivy's own label is CRITICAL. Rated critical by NVD, Red Hat, Amazon, Azure Linux, CBL-Mariner. Rated lower by AlmaLinux (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).

Description

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a device on the network. To exploit the vulnerability, an unauthenticated attacker would be required to use MS-NRPC to connect to a domain controller to obtain domain administrator access. Microsoft is addressing the vulnerability in a phased two-part rollout. These updates address the vulnerability by modifying how Netlogon handles the usage of Netlogon secure channels. For guidelines on how to manage the changes required for this vulnerability and more information on the phased rollout, see How to manage the changes in Netlogon secure channel connections associated with CVE-2020-1472 (updated September 28, 2020). When the second phase of Windows updates become available in Q1 2021, customers will be notified via a revision to this security vulnerability. If you wish to be notified when these updates are released, we recommend that you register for the security notifications mailer to be alerted of content changes to this advisory. See Microsoft Technical Security Notifications.

Affected packages and fixed versions

SourcePackageFixed in
amazon linux 1ctdb, ctdb-tests, libsmbclient and 22 more4.10.16-9.56.amzn1
amazon linux 2ctdb, ctdb-tests, libsmbclient and 25 more4.10.16-9.amzn2.0.1
Azure Linux 3.0samba0:4.18.3-1.azl3
CBL-Mariner 2.0samba0:4.12.5-4.cm2
Red Hatlibsmbclient, libsmbclient-devel, samba and 24 moreno fix listed
alma 8libsmbclient-devel, libwbclient-devel, openchange and 1 more4.13.3-3.el8 and 1 more
alpine 3.10samba4.10.18-r0
alpine 3.11samba4.11.14-r0
alpine 3.12samba4.12.7-r0
alpine 3.13samba4.12.7-r0
alpine 3.14samba4.12.7-r0
alpine 3.15samba4.12.7-r0
Show all 195 entries from 42 sources
SourcePackageFixed in
amazon linux 1ctdb4.10.16-9.56.amzn1
amazon linux 1ctdb-tests4.10.16-9.56.amzn1
amazon linux 1libsmbclient4.10.16-9.56.amzn1
amazon linux 1libsmbclient-devel4.10.16-9.56.amzn1
amazon linux 1libwbclient4.10.16-9.56.amzn1
amazon linux 1libwbclient-devel4.10.16-9.56.amzn1
amazon linux 1samba4.10.16-9.56.amzn1
amazon linux 1samba-client4.10.16-9.56.amzn1
amazon linux 1samba-client-libs4.10.16-9.56.amzn1
amazon linux 1samba-common4.10.16-9.56.amzn1
amazon linux 1samba-common-libs4.10.16-9.56.amzn1
amazon linux 1samba-common-tools4.10.16-9.56.amzn1
amazon linux 1samba-debuginfo4.10.16-9.56.amzn1
amazon linux 1samba-devel4.10.16-9.56.amzn1
amazon linux 1samba-krb5-printing4.10.16-9.56.amzn1
amazon linux 1samba-libs4.10.16-9.56.amzn1
amazon linux 1samba-pidl4.10.16-9.56.amzn1
amazon linux 1samba-python4.10.16-9.56.amzn1
amazon linux 1samba-python-test4.10.16-9.56.amzn1
amazon linux 1samba-test4.10.16-9.56.amzn1
amazon linux 1samba-test-libs4.10.16-9.56.amzn1
amazon linux 1samba-winbind4.10.16-9.56.amzn1
amazon linux 1samba-winbind-clients4.10.16-9.56.amzn1
amazon linux 1samba-winbind-krb5-locator4.10.16-9.56.amzn1
amazon linux 1samba-winbind-modules4.10.16-9.56.amzn1
amazon linux 2ctdb4.10.16-9.amzn2.0.1
amazon linux 2ctdb-tests4.10.16-9.amzn2.0.1
amazon linux 2libsmbclient4.10.16-9.amzn2.0.1
amazon linux 2libsmbclient-devel4.10.16-9.amzn2.0.1
amazon linux 2libwbclient4.10.16-9.amzn2.0.1
amazon linux 2libwbclient-devel4.10.16-9.amzn2.0.1
amazon linux 2samba4.10.16-9.amzn2.0.1
amazon linux 2samba-client4.10.16-9.amzn2.0.1
amazon linux 2samba-client-libs4.10.16-9.amzn2.0.1
amazon linux 2samba-common4.10.16-9.amzn2.0.1
amazon linux 2samba-common-libs4.10.16-9.amzn2.0.1
amazon linux 2samba-common-tools4.10.16-9.amzn2.0.1
amazon linux 2samba-dc4.10.16-9.amzn2.0.1
amazon linux 2samba-dc-libs4.10.16-9.amzn2.0.1
amazon linux 2samba-debuginfo4.10.16-9.amzn2.0.1
amazon linux 2samba-devel4.10.16-9.amzn2.0.1
amazon linux 2samba-krb5-printing4.10.16-9.amzn2.0.1
amazon linux 2samba-libs4.10.16-9.amzn2.0.1
amazon linux 2samba-pidl4.10.16-9.amzn2.0.1
amazon linux 2samba-python4.10.16-9.amzn2.0.1
amazon linux 2samba-python-test4.10.16-9.amzn2.0.1
amazon linux 2samba-test4.10.16-9.amzn2.0.1
amazon linux 2samba-test-libs4.10.16-9.amzn2.0.1
amazon linux 2samba-vfs-glusterfs4.10.16-9.amzn2.0.1
amazon linux 2samba-winbind4.10.16-9.amzn2.0.1
amazon linux 2samba-winbind-clients4.10.16-9.amzn2.0.1
amazon linux 2samba-winbind-krb5-locator4.10.16-9.amzn2.0.1
amazon linux 2samba-winbind-modules4.10.16-9.amzn2.0.1
Azure Linux 3.0samba0:4.18.3-1.azl3
CBL-Mariner 2.0samba0:4.12.5-4.cm2
Red Hatlibsmbclientno fix listed
Red Hatlibsmbclient-develno fix listed
Red Hatsambano fix listed
Red Hatsamba-clientno fix listed
Red Hatsamba-commonno fix listed
Red Hatsamba-docno fix listed
Red Hatsamba-domainjoin-guino fix listed
Red Hatsamba-glusterfsno fix listed
Red Hatsamba-swatno fix listed
Red Hatsamba-winbindno fix listed
Red Hatsamba-winbind-clientsno fix listed
Red Hatsamba-winbind-develno fix listed
Red Hatsamba-winbind-krb5-locatorno fix listed
Red Hatsamba4no fix listed
Red Hatsamba4-clientno fix listed
Red Hatsamba4-commonno fix listed
Red Hatsamba4-dcno fix listed
Red Hatsamba4-dc-libsno fix listed
Red Hatsamba4-develno fix listed
Red Hatsamba4-libsno fix listed
Red Hatsamba4-pidlno fix listed
Red Hatsamba4-pythonno fix listed
Red Hatsamba4-swatno fix listed
Red Hatsamba4-testno fix listed
Red Hatsamba4-winbindno fix listed
Red Hatsamba4-winbind-clientsno fix listed
Red Hatsamba4-winbind-krb5-locatorno fix listed
alma 8libsmbclient-devel4.13.3-3.el8
alma 8libwbclient-devel4.13.3-3.el8
alma 8openchange2.3-27.el8
alma 8samba-devel4.13.3-3.el8
alpine 3.10samba4.10.18-r0
alpine 3.11samba4.11.14-r0
alpine 3.12samba4.12.7-r0
alpine 3.13samba4.12.7-r0
alpine 3.14samba4.12.7-r0
alpine 3.15samba4.12.7-r0
alpine 3.16samba4.12.7-r0
alpine 3.17samba4.12.7-r0
alpine 3.18samba4.12.7-r0
alpine 3.19samba4.12.7-r0
alpine 3.20samba4.12.7-r0
alpine 3.21samba4.12.7-r0
alpine 3.22samba4.12.7-r0
alpine 3.23samba4.12.7-r0
alpine 3.24samba4.12.7-r0
alpine edgesamba4.12.7-r0
debian 10sambano fix listed
debian 11samba2:4.13.2+dfsg-2
debian 12samba2:4.13.2+dfsg-2
debian 13samba2:4.13.2+dfsg-2
debian 14samba2:4.13.2+dfsg-2
debian 9samba2:4.5.16+dfsg-1+deb9u3
echosamba2:4.13.2+dfsg-2
Oracle Linux 7ctdb4.10.16-9.el7_9
Oracle Linux 7ctdb-tests4.10.16-9.el7_9
Oracle Linux 7libsmbclient4.10.16-9.el7_9
Oracle Linux 7libsmbclient-devel4.10.16-9.el7_9
Oracle Linux 7libwbclient4.10.16-9.el7_9
Oracle Linux 7libwbclient-devel4.10.16-9.el7_9
Oracle Linux 7samba4.10.16-9.el7_9
Oracle Linux 7samba-client4.10.16-9.el7_9
Oracle Linux 7samba-client-libs4.10.16-9.el7_9
Oracle Linux 7samba-common4.10.16-9.el7_9
Oracle Linux 7samba-common-libs4.10.16-9.el7_9
Oracle Linux 7samba-common-tools4.10.16-9.el7_9
Oracle Linux 7samba-dc4.10.16-9.el7_9
Oracle Linux 7samba-dc-libs4.10.16-9.el7_9
Oracle Linux 7samba-devel4.10.16-9.el7_9
Oracle Linux 7samba-krb5-printing4.10.16-9.el7_9
Oracle Linux 7samba-libs4.10.16-9.el7_9
Oracle Linux 7samba-pidl4.10.16-9.el7_9
Oracle Linux 7samba-python4.10.16-9.el7_9
Oracle Linux 7samba-python-test4.10.16-9.el7_9
Oracle Linux 7samba-test4.10.16-9.el7_9
Oracle Linux 7samba-test-libs4.10.16-9.el7_9
Oracle Linux 7samba-vfs-glusterfs4.10.16-9.el7_9
Oracle Linux 7samba-winbind4.10.16-9.el7_9
Oracle Linux 7samba-winbind-clients4.10.16-9.el7_9
Oracle Linux 7samba-winbind-krb5-locator4.10.16-9.el7_9
Oracle Linux 7samba-winbind-modules4.10.16-9.el7_9
Oracle Linux 8ctdb4.13.3-3.el8
Oracle Linux 8ctdb-tests4.13.3-3.el8
Oracle Linux 8libsmbclient4.13.3-3.el8
Oracle Linux 8libsmbclient-devel4.13.3-3.el8
Oracle Linux 8libwbclient4.13.3-3.el8
Oracle Linux 8libwbclient-devel4.13.3-3.el8
Oracle Linux 8openchange2.3-27.0.1.el8
Oracle Linux 8python3-samba4.13.3-3.el8
Oracle Linux 8python3-samba-test4.13.3-3.el8
Oracle Linux 8samba4.13.3-3.el8
Oracle Linux 8samba-client4.13.3-3.el8
Oracle Linux 8samba-client-libs4.13.3-3.el8
Oracle Linux 8samba-common4.13.3-3.el8
Oracle Linux 8samba-common-libs4.13.3-3.el8
Oracle Linux 8samba-common-tools4.13.3-3.el8
Oracle Linux 8samba-devel4.13.3-3.el8
Oracle Linux 8samba-krb5-printing4.13.3-3.el8
Oracle Linux 8samba-libs4.13.3-3.el8
Oracle Linux 8samba-pidl4.13.3-3.el8
Oracle Linux 8samba-test4.13.3-3.el8
Oracle Linux 8samba-test-libs4.13.3-3.el8
Oracle Linux 8samba-winbind4.13.3-3.el8
Oracle Linux 8samba-winbind-clients4.13.3-3.el8
Oracle Linux 8samba-winbind-krb5-locator4.13.3-3.el8
Oracle Linux 8samba-winbind-modules4.13.3-3.el8
Oracle Linux 8samba-winexe4.13.3-3.el8
rocky 8ctdb4.13.3-3.el8
rocky 8ctdb-tests4.13.3-3.el8
rocky 8libsmbclient4.13.3-3.el8
rocky 8libwbclient4.13.3-3.el8
rocky 8openchange2.3-27.el8
rocky 8python3-samba4.13.3-3.el8
rocky 8python3-samba-test4.13.3-3.el8
rocky 8samba4.13.3-3.el8
rocky 8samba-client4.13.3-3.el8
rocky 8samba-client-libs4.13.3-3.el8
rocky 8samba-common4.13.3-3.el8
rocky 8samba-common-libs4.13.3-3.el8
rocky 8samba-common-tools4.13.3-3.el8
rocky 8samba-krb5-printing4.13.3-3.el8
rocky 8samba-libs4.13.3-3.el8
rocky 8samba-pidl4.13.3-3.el8
rocky 8samba-test4.13.3-3.el8
rocky 8samba-test-libs4.13.3-3.el8
rocky 8samba-winbind4.13.3-3.el8
rocky 8samba-winbind-clients4.13.3-3.el8
rocky 8samba-winbind-krb5-locator4.13.3-3.el8
rocky 8samba-winbind-modules4.13.3-3.el8
rocky 8samba-winexe4.13.3-3.el8
root.io alpine 3.18rootio-samba4.12.7-r0
root.io alpine 3.19rootio-samba4.12.7-r0
root.io debian 12rootio-samba2:4.13.2+dfsg-2
ubuntu 14.04-ESMsamba2:4.3.11+dfsg-0ubuntu0.14.04.20+esm9
ubuntu 16.04samba2:4.3.11+dfsg-0ubuntu0.16.04.31
ubuntu 16.04-ESMsamba2:4.3.11+dfsg-0ubuntu0.16.04.31
ubuntu 18.04samba2:4.7.6+dfsg~ubuntu-0ubuntu2.20
ubuntu 18.04-ESMsamba2:4.7.6+dfsg~ubuntu-0ubuntu2.20
ubuntu 20.04samba2:4.11.6+dfsg-0ubuntu1.5
ubuntu 20.04-ESMsamba2:4.11.6+dfsg-0ubuntu1.5

References

All 50 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.