CVE-2010-3069
NoneCVSS
—
EPSS
10.1%
Published
Sep 15, 2010
CISA due date
—
The record
Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Windows Security ID (SID) on a file share.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | samba | 0 | 2:3.5.5~dfsg-1 |
| Debian:12 | samba | 0 | 2:3.5.5~dfsg-1 |
| Debian:13 | samba | 0 | 2:3.5.5~dfsg-1 |
| Debian:14 | samba | 0 | 2:3.5.5~dfsg-1 |
| Debian:5.0 | samba | 0 | 2:3.2.5-4lenny13 |
| Red Hat:enterprise_linux:3::as | samba | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::as | samba-client | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::as | samba-common | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::as | samba-debuginfo | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::as | samba-swat | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::desktop | samba | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::desktop | samba-client | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::desktop | samba-common | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::desktop | samba-debuginfo | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::desktop | samba-swat | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::es | samba | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::es | samba-client | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::es | samba-common | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::es | samba-debuginfo | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::es | samba-swat | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::ws | samba | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::ws | samba-client | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::ws | samba-common | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::ws | samba-debuginfo | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:3::ws | samba-swat | 0 | 0:3.0.9-1.3E.18 |
| Red Hat:enterprise_linux:4::as | samba | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::as | samba-client | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::as | samba-common | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::as | samba-debuginfo | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::as | samba-swat | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | samba | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | samba-client | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | samba-common | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | samba-debuginfo | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::desktop | samba-swat | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::es | samba | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::es | samba-client | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::es | samba-common | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::es | samba-debuginfo | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::es | samba-swat | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | samba | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | samba-client | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | samba-common | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | samba-debuginfo | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:4::ws | samba-swat | 0 | 0:3.0.33-0.19.el4_8.3 |
| Red Hat:enterprise_linux:5::client | libsmbclient | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::client | libsmbclient-devel | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::client | libtalloc | 0 | 0:1.2.0-52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | libtalloc-devel | 0 | 0:1.2.0-52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | libtdb | 0 | 0:1.1.2-52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | libtdb-devel | 0 | 0:1.1.2-52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | samba | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::client | samba-client | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::client | samba-common | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::client | samba-debuginfo | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::client | samba-swat | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::client | samba3x | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | samba3x-client | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | samba3x-common | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | samba3x-debuginfo | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | samba3x-doc | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | samba3x-domainjoin-gui | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | samba3x-swat | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | samba3x-winbind | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | samba3x-winbind-devel | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client | tdb-tools | 0 | 0:1.1.2-52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | libtalloc | 0 | 0:1.2.0-52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | libtalloc-devel | 0 | 0:1.2.0-52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | libtdb | 0 | 0:1.1.2-52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | libtdb-devel | 0 | 0:1.1.2-52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-client | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-common | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-debuginfo | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-doc | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-domainjoin-gui | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-swat | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-winbind | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | samba3x-winbind-devel | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::client_workstation | tdb-tools | 0 | 0:1.1.2-52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | libsmbclient | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::server | libsmbclient-devel | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::server | libtalloc | 0 | 0:1.2.0-52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | libtalloc-devel | 0 | 0:1.2.0-52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | libtdb | 0 | 0:1.1.2-52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | libtdb-devel | 0 | 0:1.1.2-52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | samba | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::server | samba-client | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::server | samba-common | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::server | samba-debuginfo | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::server | samba-swat | 0 | 0:3.0.33-3.29.el5_5.1 |
| Red Hat:enterprise_linux:5::server | samba3x | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | samba3x-client | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | samba3x-common | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | samba3x-debuginfo | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | samba3x-doc | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | samba3x-domainjoin-gui | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | samba3x-swat | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | samba3x-winbind | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | samba3x-winbind-devel | 0 | 0:3.3.8-0.52.el5_5.2 |
| Red Hat:enterprise_linux:5::server | tdb-tools | 0 | 0:1.1.2-52.el5_5.2 |
| Red Hat:enterprise_linux:6::client | libsmbclient | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | libsmbclient-devel | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba-client | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba-common | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba-debuginfo | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba-doc | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba-domainjoin-gui | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba-swat | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba-winbind | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba-winbind-clients | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::client | samba-winbind-devel | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | libsmbclient | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | libsmbclient-devel | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba-client | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba-common | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba-debuginfo | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba-doc | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba-domainjoin-gui | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba-swat | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba-winbind | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba-winbind-clients | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::computenode | samba-winbind-devel | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | libsmbclient | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | libsmbclient-devel | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba-client | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba-common | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba-debuginfo | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba-doc | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba-domainjoin-gui | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba-swat | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba-winbind | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba-winbind-clients | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::server | samba-winbind-devel | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | libsmbclient | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | libsmbclient-devel | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba-client | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba-common | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba-debuginfo | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba-doc | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba-domainjoin-gui | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba-swat | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba-winbind | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba-winbind-clients | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:enterprise_linux:6::workstation | samba-winbind-devel | 0 | 0:3.5.4-68.el6_0.1 |
| Red Hat:rhel_eus:4.7::as | samba | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | samba-client | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | samba-common | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | samba-debuginfo | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:4.7::as | samba-swat | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | samba | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | samba-client | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | samba-common | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | samba-debuginfo | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:4.7::es | samba-swat | 0 | 0:3.0.28-0.10.el4_7.1 |
| Red Hat:rhel_eus:5.3 | samba | 0 | 0:3.0.33-3.7.el5_3.3 |
| Red Hat:rhel_eus:5.3 | samba-client | 0 | 0:3.0.33-3.7.el5_3.3 |
| Red Hat:rhel_eus:5.3 | samba-common | 0 | 0:3.0.33-3.7.el5_3.3 |
| Red Hat:rhel_eus:5.3 | samba-debuginfo | 0 | 0:3.0.33-3.7.el5_3.3 |
| Red Hat:rhel_eus:5.3 | samba-swat | 0 | 0:3.0.33-3.7.el5_3.3 |
| Red Hat:rhel_eus:5.4 | samba | 0 | 0:3.0.33-3.15.el5_4.3 |
| Red Hat:rhel_eus:5.4 | samba-client | 0 | 0:3.0.33-3.15.el5_4.3 |
| Red Hat:rhel_eus:5.4 | samba-common | 0 | 0:3.0.33-3.15.el5_4.3 |
| Red Hat:rhel_eus:5.4 | samba-debuginfo | 0 | 0:3.0.33-3.15.el5_4.3 |
| Red Hat:rhel_eus:5.4 | samba-swat | 0 | 0:3.0.33-3.15.el5_4.3 |
| openSUSE:Tumbleweed | samba | 0 | 4.5.0-1.1 |
Related vulnerabilities
- CVE-2020-1472 An elevation of privilege vulnerability exists when an attacker establishes a vulnerable… Also affects samba
- CVE-2017-15275 Samba before 4.7.3 might allow remote attackers to obtain sensitive information by… Also affects samba
- CVE-2017-14746 Use-after-free vulnerability in Samba 4.x before 4.7.3 allows remote attackers to execute… Also affects samba
- CVE-2017-11103 Heimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre… Also affects samba
- CVE-2017-9461 smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability… Also affects samba
- CVE-2017-7494 Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote… Also affects samba
- CVE-2016-2119 libcli/smb/smbXcli_base.c in Samba 4.x before 4.2.14, 4.3.x before 4.3.11, and 4.4.x… Also affects samba
- CVE-2016-2115 Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not… Also affects samba