CVE-2010-2063: canonical ubuntu_linux

Modified

AliasesRHSA-2010:0488DEBIAN-CVE-2010-2063DSA-2061-1

Published 17-06-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-2063 is a high (CVSS 7.5) vulnerability in canonical ubuntu_linux. EPSS estimates a 78.56% chance of exploitation in the next 30 days, higher than 99.5% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritiseweaponized exploit

Weaponized exploit (exploit-database, 04-09-2010)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

78.56%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2exploit-database, metasploit

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:10069-1

Timeline

17-06-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

78.56%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

No change 0.00 pp

From 78.56% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

exploit-databaseremotelinux_x86Verified
Samba 3.3.12 (Linux x86) - 'chain_reply' Memory Corruption (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
Samba chain_reply Memory Corruption (Linux x86)
exploit/linux/samba/chain_reply
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat21 products

libsmbclient< 0:3.0.33-3.29.el5_5
libsmbclient-devel< 0:3.0.33-3.29.el5_5
libtalloc< 0:1.2.0-52.el5_5
libtalloc-devel< 0:1.2.0-52.el5_5
libtdb< 0:1.1.2-52.el5_5

Show all 21

Debian2 products

samba< 2:3.2.5-4lenny12 | < 2:3.4.0~pre1-1
debian_linuxEOL5.0

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 9.04

Samba1 product

samba≥ 3.0.0, ≤ 3.3.12

4 vendors · 25 products

References

42 links

marc.info?l=bugtraq&m=130835366526620&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/59481VDB EntryX Refsource XFThird Party Advisory
osvdb.org/65518VDB EntryX Refsource OSVDBBroken Link
marc.info?l=bugtraq&m=129138831608422&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.securityfocus.com/bid/40884VDB EntryX Refsource BIDThird Party Advisory
marc.info?l=samba-announce&m=127668712312761&w=2Mailing ListX Refsource MLISTPatchThird Party Advisory
secunia.com/advisories/40210Third Party AdvisoryX Refsource SECUNIA
www.samba.org/samba/ftp/history/samba-3.3.13.htmlX Refsource CONFIRMVendor Advisory
www.samba.org/samba/ftp/patches/security/samba-3.3.12-CVE-2010-2063.patchX Refsource CONFIRMPatchVendor Advisory
secunia.com/advisories/40145Third Party AdvisoryX Refsource SECUNIA

Show all 42 references

www.vupen.com/english/advisories/2010/1507VDB EntryX Refsource VUPENPermissions Required
www.samba.org/samba/ftp/patches/security/samba-3.0.37-CVE-2010-2063.patchX Refsource CONFIRMPatchVendor Advisory
www.vupen.com/english/advisories/2010/1505VDB EntryX Refsource VUPENPermissions Required
secunia.com/advisories/40293Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2010/dsa-2061Vendor AdvisoryX Refsource DEBIANThird Party Advisory
ubuntu.com/usn/usn-951-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2010:119Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
lists.apple.com/archives/security-announce/2010//Aug/msg00003.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/40221Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2010/1504VDB EntryX Refsource VUPENPermissions Required
support.apple.com/kb/HT4312X Refsource CONFIRMThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9859VDB EntrySignatureX Refsource OVALThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0488.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.vupen.com/english/advisories/2010/1486VDB EntryX Refsource VUPENPermissions Required
secunia.com/advisories/42319Third Party AdvisoryX Refsource SECUNIA
www.samba.org/samba/security/CVE-2010-2063.htmlX Refsource CONFIRMVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12427VDB EntrySignatureX Refsource OVALThird Party Advisory
www.securitytracker.com/id?1024107VDB EntryX Refsource SECTRACKThird Party Advisory
www.vupen.com/english/advisories/2010/1517VDB EntryX Refsource VUPENPermissions Required
www.vupen.com/english/advisories/2010/3063VDB EntryX Refsource VUPENPermissions Required
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7115VDB EntrySignatureX Refsource OVALThird Party Advisory
labs.idefense.com/intelligence/vulnerabilities/display.php?id=873Third Party AdvisoryX Refsource IDEFENSEBroken Link
slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.471914Vendor AdvisoryX Refsource SLACKWAREMailing ListThird Party Advisory
access.redhat.com/errata/RHSA-2010:0488Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=601419REPORT
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0488.jsonAdvisory
access.redhat.com/security/cve/CVE-2010-2063REPORT
www.cve.org/CVERecord?id=CVE-2010-2063Advisory
nvd.nist.gov/vuln/detail/CVE-2010-2063Advisory
security-tracker.debian.org/tracker/CVE-2010-2063Advisory