CVE-2010-2063
- State
- Published
- Severity
- Not scored
- Published
- Jun 17, 2010
- Updated
- Aug 7, 2024
- Reserved
- May 25, 2010
Description
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- HPSBUX02657vendor-advisory
- samba-smb1-code-execution(59481)vdb-entry
- 65518vdb-entry
- HPSBUX02609vendor-advisory
- 40884vdb-entry
- [samba-announce] 20100616 Samba 3.3.13 Security Release Available for Downloadmailing-list
- 40210third-party-advisory
- http://www.samba.org/samba/ftp/history/samba-3.3.13.html
- http://www.samba.org/samba/ftp/patches/security/samba-3.3.12-CVE-2010-2063.patch
- 40145third-party-advisory
- ADV-2010-1507vdb-entry
- http://www.samba.org/samba/ftp/patches/security/samba-3.0.37-CVE-2010-2063.patch
- ADV-2010-1505vdb-entry
- 40293third-party-advisory
- DSA-2061vendor-advisory
- USN-951-1vendor-advisory
- MDVSA-2010:119vendor-advisory
- APPLE-SA-2010-08-24-1vendor-advisory
- 40221third-party-advisory
- ADV-2010-1504vdb-entry
- http://support.apple.com/kb/HT4312
- oval:org.mitre.oval:def:9859vdb-entrysignature
- RHSA-2010:0488vendor-advisory
- SUSE-SR:2010:014vendor-advisory
- ADV-2010-1486vdb-entry
- 42319third-party-advisory
- http://www.samba.org/samba/security/CVE-2010-2063.html
- oval:org.mitre.oval:def:12427vdb-entrysignature
- 1024107vdb-entry
- ADV-2010-1517vdb-entry
- ADV-2010-3063vdb-entry
- oval:org.mitre.oval:def:7115vdb-entrysignature
- 20100616 Samba 3.3.12 Memory Corruption Vulnerabilitythird-party-advisory
- SSA:2010-169-01vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.