CVE-2010-1635
published 2010-06-17CVE-2010-1635: The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer…
PriorityP422medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
3.80%
88.9th percentile
The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
Affected
103 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | samba | < samba 2:3.6.1-2 (bookworm) | samba 2:3.6.1-2 (bookworm) |
| samba | samba | <= 3.4.7 | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
| samba | samba | — | — |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_redhat7.8HIGH
vendor_debian5.0LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-xvfw-jjhx-vm37: The chain_reply function in process
ghsa_unreviewed·2022-05-14
CVE-2010-1635 [MEDIUM] GHSA-xvfw-jjhx-vm37: The chain_reply function in process
The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
OSV
CVE-2010-1635: The chain_reply function in process
osv·2010-06-17·CVSS 5.0
CVE-2010-1635 [MEDIUM] CVE-2010-1635: The chain_reply function in process
The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
Red Hat
samba: denial of service vulnerabilities
vendor_redhat·2010-05-12·CVSS 5.0
CVE-2010-1635 [MEDIUM] samba: denial of service vulnerabilities
samba: denial of service vulnerabilities
The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
Debian
CVE-2010-1635: samba - The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x be...
vendor_debian·2010·CVSS 5.0
CVE-2010-1635 [MEDIUM] CVE-2010-1635: samba - The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x be...
The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
Scope: local
bookworm: resolved (fixed in 2:3.6.1-2)
bullseye: resolved (fixed in 2:3.6.1-2)
forky: resolved (fixed in 2:3.6.1-2)
sid: resolved (fixed in 2:3.6.1-2)
trixie: resolved (fixed in 2:3.6.1-2)
Red Hat
kernel: nfsv4: kernel panic in nfs4_proc_lock()
vendor_redhat·2008-10-22·CVSS 7.8
CVE-2009-3726 [HIGH] CWE-662 kernel: nfsv4: kernel panic in nfs4_proc_lock()
kernel: nfsv4: kernel panic in nfs4_proc_lock()
The nfs4_proc_lock function in fs/nfs/nfs4proc.c in the NFSv4 client in the Linux kernel before 2.6.31-rc4 allows remote NFS servers to cause a denial of service (NULL pointer dereference and panic) by sending a certain response containing incorrect file attributes, which trigger attempted use of an open file that lacks NFSv4 state.
Statement: The Linux kernel as shipped with Red Hat Enterprise Linux 3 did not have support for NFSv4, and therefore is not affected by this issue. It was addressed in Red Hat Enterprise Linux 4, 5, and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2010-0474.html, https://rhn.redhat.com/errata/RHSA-2009-1670.html and https://rhn.redhat.com/errata/RHSA-2009-1635.html respectively.
No detection rules found.
No public exploits indexed.
http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=25452a2268ac7013da28125f3df22085139af12dhttp://samba.org/samba/history/samba-3.4.8.htmlhttp://samba.org/samba/history/samba-3.5.2.htmlhttp://security-tracker.debian.org/tracker/CVE-2010-1635http://www.mandriva.com/security/advisories?name=MDVSA-2010:141http://www.securityfocus.com/bid/40097http://www.stratsec.net/Research/Advisories/Samba-Multiple-DoS-Vulnerabilities-%28SS-2010-005%29http://www.vupen.com/english/advisories/2010/1933https://bugzilla.redhat.com/show_bug.cgi?id=594921https://bugzilla.samba.org/show_bug.cgi?id=7229http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=25452a2268ac7013da28125f3df22085139af12dhttp://samba.org/samba/history/samba-3.4.8.htmlhttp://samba.org/samba/history/samba-3.5.2.htmlhttp://security-tracker.debian.org/tracker/CVE-2010-1635http://www.mandriva.com/security/advisories?name=MDVSA-2010:141http://www.securityfocus.com/bid/40097http://www.stratsec.net/Research/Advisories/Samba-Multiple-DoS-Vulnerabilities-%28SS-2010-005%29http://www.vupen.com/english/advisories/2010/1933https://bugzilla.redhat.com/show_bug.cgi?id=594921https://bugzilla.samba.org/show_bug.cgi?id=7229
2010-06-17
Published