CVE-2010-2063
NoneCVSS
—
EPSS
78.6%
Published
Jun 17, 2010
CISA due date
—
The record
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | samba | 0 | 2:3.4.0~pre1-1 |
| Debian:11 | samba | 0 | 2:3.4.0~pre1-1 |
| Debian:12 | samba | 0 | 2:3.4.0~pre1-1 |
| Debian:13 | samba | 0 | 2:3.4.0~pre1-1 |
| Debian:14 | samba | 0 | 2:3.4.0~pre1-1 |
| Debian:5.0 | samba | 0 | 2:3.2.5-4lenny12 |
| Red Hat:enterprise_linux:3::as | samba | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::as | samba-client | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::as | samba-common | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::as | samba-debuginfo | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::as | samba-swat | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::desktop | samba | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::desktop | samba-client | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::desktop | samba-common | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::desktop | samba-debuginfo | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::desktop | samba-swat | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::es | samba | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::es | samba-client | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::es | samba-common | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::es | samba-debuginfo | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::es | samba-swat | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::ws | samba | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::ws | samba-client | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::ws | samba-common | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::ws | samba-debuginfo | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:3::ws | samba-swat | 0 | 0:3.0.9-1.3E.17 |
| Red Hat:enterprise_linux:4::as | samba | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::as | samba-client | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::as | samba-common | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::as | samba-debuginfo | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::as | samba-swat | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | samba | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | samba-client | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | samba-common | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | samba-debuginfo | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::desktop | samba-swat | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::es | samba | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::es | samba-client | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::es | samba-common | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::es | samba-debuginfo | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::es | samba-swat | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | samba | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | samba-client | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | samba-common | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | samba-debuginfo | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:4::ws | samba-swat | 0 | 0:3.0.33-0.19.el4_8.1 |
| Red Hat:enterprise_linux:5::client | libsmbclient | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::client | libsmbclient-devel | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::client | libtalloc | 0 | 0:1.2.0-52.el5_5 |
| Red Hat:enterprise_linux:5::client | libtalloc-devel | 0 | 0:1.2.0-52.el5_5 |
| Red Hat:enterprise_linux:5::client | libtdb | 0 | 0:1.1.2-52.el5_5 |
| Red Hat:enterprise_linux:5::client | libtdb-devel | 0 | 0:1.1.2-52.el5_5 |
| Red Hat:enterprise_linux:5::client | samba | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::client | samba-client | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::client | samba-common | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::client | samba-debuginfo | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::client | samba-swat | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::client | samba3x | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::client | samba3x-client | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::client | samba3x-common | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::client | samba3x-debuginfo | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::client | samba3x-doc | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::client | samba3x-domainjoin-gui | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::client | samba3x-swat | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::client | samba3x-winbind | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::client | samba3x-winbind-devel | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::client | tdb-tools | 0 | 0:1.1.2-52.el5_5 |
| Red Hat:enterprise_linux:5::server | libsmbclient | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::server | libsmbclient-devel | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::server | libtalloc | 0 | 0:1.2.0-52.el5_5 |
| Red Hat:enterprise_linux:5::server | libtalloc-devel | 0 | 0:1.2.0-52.el5_5 |
| Red Hat:enterprise_linux:5::server | libtdb | 0 | 0:1.1.2-52.el5_5 |
| Red Hat:enterprise_linux:5::server | libtdb-devel | 0 | 0:1.1.2-52.el5_5 |
| Red Hat:enterprise_linux:5::server | samba | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::server | samba-client | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::server | samba-common | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::server | samba-debuginfo | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::server | samba-swat | 0 | 0:3.0.33-3.29.el5_5 |
| Red Hat:enterprise_linux:5::server | samba3x | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::server | samba3x-client | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::server | samba3x-common | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::server | samba3x-debuginfo | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::server | samba3x-doc | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::server | samba3x-domainjoin-gui | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::server | samba3x-swat | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::server | samba3x-winbind | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::server | samba3x-winbind-devel | 0 | 0:3.3.8-0.52.el5_5 |
| Red Hat:enterprise_linux:5::server | tdb-tools | 0 | 0:1.1.2-52.el5_5 |
| Red Hat:rhel_eus:4.7::as | samba | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:4.7::as | samba-client | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:4.7::as | samba-common | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:4.7::as | samba-debuginfo | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:4.7::as | samba-swat | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:4.7::es | samba | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:4.7::es | samba-client | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:4.7::es | samba-common | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:4.7::es | samba-debuginfo | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:4.7::es | samba-swat | 0 | 0:3.0.28-0.10.el4_7 |
| Red Hat:rhel_eus:5.3 | samba | 0 | 0:3.0.33-3.7.el5_3.2 |
| Red Hat:rhel_eus:5.3 | samba-client | 0 | 0:3.0.33-3.7.el5_3.2 |
| Red Hat:rhel_eus:5.3 | samba-common | 0 | 0:3.0.33-3.7.el5_3.2 |
| Red Hat:rhel_eus:5.3 | samba-debuginfo | 0 | 0:3.0.33-3.7.el5_3.2 |
| Red Hat:rhel_eus:5.3 | samba-swat | 0 | 0:3.0.33-3.7.el5_3.2 |
| Red Hat:rhel_eus:5.4 | samba | 0 | 0:3.0.33-3.15.el5_4.2 |
| Red Hat:rhel_eus:5.4 | samba-client | 0 | 0:3.0.33-3.15.el5_4.2 |
| Red Hat:rhel_eus:5.4 | samba-common | 0 | 0:3.0.33-3.15.el5_4.2 |
| Red Hat:rhel_eus:5.4 | samba-debuginfo | 0 | 0:3.0.33-3.15.el5_4.2 |
| Red Hat:rhel_eus:5.4 | samba-swat | 0 | 0:3.0.33-3.15.el5_4.2 |
| openSUSE:Tumbleweed | samba | 0 | 4.5.0-1.1 |
Related vulnerabilities
- CVE-2014-0178 Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain… Also affects samba
- CVE-2013-4124 Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x… Also affects samba
- CVE-2011-2522 Multiple cross-site request forgery (CSRF) vulnerabilities in the Samba Web… Also affects samba
- CVE-2010-0926 The default configuration of smbd in Samba before 3.3.11, 3.4.x before 3.4.6, and 3.5.x… Also affects samba
- CVE-2008-1105 Heap-based buffer overflow in the receive_smb_raw function in util/sock.c in Samba 3.0.0… Also affects samba
- CVE-2007-6015 Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through… Also affects samba
- CVE-2007-5398 Stack-based buffer overflow in the reply_netbios_packet function in nmbd/nmbd_packets.c… Also affects samba
- CVE-2007-2446 Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through… Also affects samba