Lucene search

RedhatCVE-2010-1635

HistoryJun 17, 2010 - 4:30 p.m.

CVE-2010-1635

2010-06-1716:30:01

redhat

web.nvd.nist.gov

samba

smbd

cve-2010-1635

denial of service

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

Low

EPSS

0.297

Percentile

96.9%

JSON

The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.

Affected configurations

Nvd

Node

sambasambaRange≤3.4.7

sambasambaMatch3.0.0

sambasambaMatch3.0.1

sambasambaMatch3.0.2

sambasambaMatch3.0.2a

sambasambaMatch3.0.3

sambasambaMatch3.0.4

sambasambaMatch3.0.4rc1

sambasambaMatch3.0.5

sambasambaMatch3.0.6

sambasambaMatch3.0.7

sambasambaMatch3.0.8

sambasambaMatch3.0.9

sambasambaMatch3.0.10

sambasambaMatch3.0.11

sambasambaMatch3.0.12

sambasambaMatch3.0.13

sambasambaMatch3.0.14

sambasambaMatch3.0.14a

sambasambaMatch3.0.15

sambasambaMatch3.0.16

sambasambaMatch3.0.17

sambasambaMatch3.0.18

sambasambaMatch3.0.19

sambasambaMatch3.0.20

sambasambaMatch3.0.20a

sambasambaMatch3.0.20b

sambasambaMatch3.0.21

sambasambaMatch3.0.21a

sambasambaMatch3.0.21b

sambasambaMatch3.0.21c

sambasambaMatch3.0.22

sambasambaMatch3.0.23

sambasambaMatch3.0.23a

sambasambaMatch3.0.23b

sambasambaMatch3.0.23c

sambasambaMatch3.0.23d

sambasambaMatch3.0.24

sambasambaMatch3.0.25

sambasambaMatch3.0.25pre1

sambasambaMatch3.0.25pre2

sambasambaMatch3.0.25rc1

sambasambaMatch3.0.25rc2

sambasambaMatch3.0.25rc3

sambasambaMatch3.0.25a

sambasambaMatch3.0.25b

sambasambaMatch3.0.25c

sambasambaMatch3.0.26

sambasambaMatch3.0.26a

sambasambaMatch3.0.27

sambasambaMatch3.0.27a

sambasambaMatch3.0.28

sambasambaMatch3.0.28a

sambasambaMatch3.0.29

sambasambaMatch3.0.30

sambasambaMatch3.0.31

sambasambaMatch3.0.32

sambasambaMatch3.0.33

sambasambaMatch3.0.34

sambasambaMatch3.0.35

sambasambaMatch3.0.36

sambasambaMatch3.0.37

sambasambaMatch3.1.0

sambasambaMatch3.2

sambasambaMatch3.2.0

sambasambaMatch3.2.1

sambasambaMatch3.2.2

sambasambaMatch3.2.3

sambasambaMatch3.2.4

sambasambaMatch3.2.5

sambasambaMatch3.2.6

sambasambaMatch3.2.7

sambasambaMatch3.2.8

sambasambaMatch3.2.9

sambasambaMatch3.2.10

sambasambaMatch3.2.11

sambasambaMatch3.2.12

sambasambaMatch3.2.13

sambasambaMatch3.2.14

sambasambaMatch3.2.15

sambasambaMatch3.3

sambasambaMatch3.3.0

sambasambaMatch3.3.1

sambasambaMatch3.3.2

sambasambaMatch3.3.3

sambasambaMatch3.3.4

sambasambaMatch3.3.5

sambasambaMatch3.3.6

sambasambaMatch3.3.7

sambasambaMatch3.3.8

sambasambaMatch3.3.9

sambasambaMatch3.3.10

sambasambaMatch3.3.11

sambasambaMatch3.4

sambasambaMatch3.4.0

sambasambaMatch3.4.1

sambasambaMatch3.4.2

sambasambaMatch3.4.3

sambasambaMatch3.4.4

sambasambaMatch3.4.5

sambasambaMatch3.4.6

sambasambaMatch3.5

sambasambaMatch3.5.0

sambasambaMatch3.5.1

VendorProductVersionCPE
sambasamba*cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
sambasamba3.0.0cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:*
sambasamba3.0.1cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:*
sambasamba3.0.2cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:*
sambasamba3.0.2acpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:*
sambasamba3.0.3cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:*
sambasamba3.0.4cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:*
sambasamba3.0.4cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:*
sambasamba3.0.5cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:*
sambasamba3.0.6cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samba	samba	*	cpe:2.3:a:samba:samba::::::::
samba	samba	3.0.0	cpe:2.3:a:samba:samba:3.0.0:::::::*
samba	samba	3.0.1	cpe:2.3:a:samba:samba:3.0.1:::::::*
samba	samba	3.0.2	cpe:2.3:a:samba:samba:3.0.2:::::::*
samba	samba	3.0.2a	cpe:2.3:a:samba:samba:3.0.2a:::::::*
samba	samba	3.0.3	cpe:2.3:a:samba:samba:3.0.3:::::::*
samba	samba	3.0.4	cpe:2.3:a:samba:samba:3.0.4:::::::*
samba	samba	3.0.4	cpe:2.3:a:samba:samba:3.0.4:rc1::::::
samba	samba	3.0.5	cpe:2.3:a:samba:samba:3.0.5:::::::*
samba	samba	3.0.6	cpe:2.3:a:samba:samba:3.0.6:::::::*