CVE-2010-3069: canonical ubuntu_linux

Modified

AliasesRHSA-2010:0697RHSA-2010:0698RHSA-2010:0860+2 more

Published 15-09-2010Last modified 07-08-2024

Vulnerability summary

CVE-2010-3069 is a high (CVSS 7.5) vulnerability in canonical ubuntu_linux. EPSS estimates a 10.14% chance of exploitation in the next 30 days, higher than 95.6% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

10.14%

0%100%

Medium · -0.40 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1

OPENSUSE-SU-2024:10069-1

Timeline

15-09-2010
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Stack-based buffer overflow in the (1) sid_parse and (2) dom_sid_parse functions in Samba before 3.5.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted Windows Security ID (SID) on a file share.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

10.14%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

Decrease -0.40 pp

From 10.55% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected systems

Version check

Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat26 products

libsmbclient< 0:3.0.33-3.29.el5_5.1 | < 0:3.5.4-68.el6_0.1
libsmbclient-devel< 0:3.0.33-3.29.el5_5.1 | < 0:3.5.4-68.el6_0.1
libtalloc< 0:1.2.0-52.el5_5.2
libtalloc-devel< 0:1.2.0-52.el5_5.2
libtdb< 0:1.1.2-52.el5_5.2

Show all 26

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 9.04 | 9.10 | 10.04

Debian1 product

samba< 2:3.2.5-4lenny13 | < 2:3.5.5~dfsg-1

Samba1 product

samba≥ 3.0.0, ≤ 3.3.14 | ≥ 3.4.0, < 3.4.9 | ≥ 3.5.0, < 3.5.5

4 vendors · 29 products

References

39 links

marc.info?l=bugtraq&m=130835366526620&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
secunia.com/advisories/42885Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2010/2378VDB EntryX Refsource VUPENPermissions Required
support.apple.com/kb/HT4723X Refsource CONFIRMThird Party Advisory
lists.fedoraproject.org/pipermail/package-announce/2010-September/047697.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
us1.samba.org/samba/security/CVE-2010-3069.htmlX Refsource CONFIRMVendor Advisory
secunia.com/advisories/41354Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce/2011//Jun/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
lists.apple.com/archives/security-announce/2011/Mar/msg00006.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/61773VDB EntryX Refsource XF

Show all 39 references

www.securityfocus.com/archive/1/515055/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-987-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securitytracker.com/id?1024434VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/41447Third Party AdvisoryX Refsource SECUNIA
lists.fedoraproject.org/pipermail/package-announce/2010-September/047650.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
secunia.com/advisories/42531Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2010/3126VDB EntryX Refsource VUPENPermissions Required
us1.samba.org/samba/history/samba-3.5.5.htmlX Refsource CONFIRMVendor Advisory
www.vmware.com/security/advisories/VMSA-2010-0019.htmlX Refsource CONFIRMPermissions RequiredThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.securityfocus.com/bid/43212VDB EntryX Refsource BIDThird Party Advisory
www.vupen.com/english/advisories/2011/0091VDB EntryX Refsource VUPENPermissions Required
lists.fedoraproject.org/pipermail/package-announce/2010-September/047758.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.redhat.com/support/errata/RHSA-2010-0860.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
support.apple.com/kb/HT4581X Refsource CONFIRMThird Party Advisory
access.redhat.com/errata/RHSA-2010:0697Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=629602REPORT
bugzilla.redhat.com/show_bug.cgi?id=630869REPORT
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0697.jsonAdvisory
access.redhat.com/security/cve/CVE-2010-3069REPORT
www.cve.org/CVERecord?id=CVE-2010-3069Advisory
nvd.nist.gov/vuln/detail/CVE-2010-3069Advisory
access.redhat.com/errata/RHSA-2010:0698Advisory
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0698.jsonAdvisory
access.redhat.com/errata/RHSA-2010:0860Advisory
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0860.jsonAdvisory
security-tracker.debian.org/tracker/CVE-2010-3069Advisory