CVE-2010-2063

Name: CVE-2010-2063
Creator: NVD / NIST
Published: 2010-06-17T16:30:01.983+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 78.70%

Last modified Jun 16, 2026

CVE-2010-2063 is a vulnerability of currently unknown severity. Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.. EPSS estimates a 78.70% chance of exploitation in the next 30 days.

Description

Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.

Metrics

EPSS Probability

78.70%

99.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Samba	Samba	>= 3.0.0, <= 3.3.12
Canonical	Ubuntu Linux	6.06
Canonical	Ubuntu Linux	8.04
Canonical	Ubuntu Linux	9.04
Debian	Debian Linux	5.0

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=873Broken Link
http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlMailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=129138831608422&w=2Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=130835366526620&w=2Mailing List, Third Party Advisory
http://marc.info/?l=samba-announce&m=127668712312761&w=2Mailing List, Patch, Third Party Advisory
http://osvdb.org/65518Broken Link
http://secunia.com/advisories/40145Third Party Advisory
http://secunia.com/advisories/40210Third Party Advisory
http://secunia.com/advisories/40221Third Party Advisory
http://secunia.com/advisories/40293Third Party Advisory
http://secunia.com/advisories/42319Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.471914Mailing List, Third Party Advisory
http://support.apple.com/kb/HT4312Third Party Advisory
http://ubuntu.com/usn/usn-951-1Third Party Advisory
http://www.debian.org/security/2010/dsa-2061Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:119Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0488.htmlThird Party Advisory
http://www.samba.org/samba/ftp/history/samba-3.3.13.htmlVendor Advisory
http://www.samba.org/samba/ftp/patches/security/samba-3.0.37-CVE-2010-2063.patchPatch, Vendor Advisory
http://www.samba.org/samba/ftp/patches/security/samba-3.3.12-CVE-2010-2063.patchPatch, Vendor Advisory
http://www.samba.org/samba/security/CVE-2010-2063.htmlVendor Advisory
http://www.securityfocus.com/bid/40884Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1024107Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/1486Permissions Required
http://www.vupen.com/english/advisories/2010/1504Permissions Required
http://www.vupen.com/english/advisories/2010/1505Permissions Required
http://www.vupen.com/english/advisories/2010/1507Permissions Required
http://www.vupen.com/english/advisories/2010/1517Permissions Required
http://www.vupen.com/english/advisories/2010/3063Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/59481Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12427Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7115Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9859Third Party Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=873Broken Link
http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.htmlMailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=129138831608422&w=2Mailing List, Third Party Advisory
http://marc.info/?l=bugtraq&m=130835366526620&w=2Mailing List, Third Party Advisory
http://marc.info/?l=samba-announce&m=127668712312761&w=2Mailing List, Patch, Third Party Advisory
http://osvdb.org/65518Broken Link
http://secunia.com/advisories/40145Third Party Advisory
http://secunia.com/advisories/40210Third Party Advisory
http://secunia.com/advisories/40221Third Party Advisory
http://secunia.com/advisories/40293Third Party Advisory
http://secunia.com/advisories/42319Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.471914Mailing List, Third Party Advisory
http://support.apple.com/kb/HT4312Third Party Advisory
http://ubuntu.com/usn/usn-951-1Third Party Advisory
http://www.debian.org/security/2010/dsa-2061Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:119Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0488.htmlThird Party Advisory
http://www.samba.org/samba/ftp/history/samba-3.3.13.htmlVendor Advisory
http://www.samba.org/samba/ftp/patches/security/samba-3.0.37-CVE-2010-2063.patchPatch, Vendor Advisory
http://www.samba.org/samba/ftp/patches/security/samba-3.3.12-CVE-2010-2063.patchPatch, Vendor Advisory
http://www.samba.org/samba/security/CVE-2010-2063.htmlVendor Advisory
http://www.securityfocus.com/bid/40884Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1024107Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/1486Permissions Required
http://www.vupen.com/english/advisories/2010/1504Permissions Required
http://www.vupen.com/english/advisories/2010/1505Permissions Required
http://www.vupen.com/english/advisories/2010/1507Permissions Required
http://www.vupen.com/english/advisories/2010/1517Permissions Required
http://www.vupen.com/english/advisories/2010/3063Permissions Required
https://exchange.xforce.ibmcloud.com/vulnerabilities/59481Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12427Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7115Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9859Third Party Advisory

Timeline

Published: Jun 17, 2010
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2010-2063?

How severe is CVE-2010-2063?

Severity scoring for CVE-2010-2063 is pending analysis. The EPSS model estimates a 78.70% probability of exploitation in the next 30 days.

How do I fix CVE-2010-2063?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2010-2063?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST