CVE-2010-0547
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1...
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Exploit likelihood
What each source reports
NVD Score used
2.1
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
CVE-2010-0547- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
CVE-2010-0547- Updated
- 2026-11-02
EUVDEUVD-2010-0578 No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
EUVD-2010-0578- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xppx-r8rj-fw45 No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1...
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
GHSA-xppx-r8rj-fw45- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
CVE-2010-0547- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0547 No score
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
- Record
DEBIAN-CVE-2010-0547- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10334-1 No score
cifs-utils-6.5-1.5 on GA media
These are all security issues fixed in the cifs-utils-6.5-1.5 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10334-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:3.4.5~dfsg-2 | 2:3.4.5~dfsg-2 |
sambaDebian:13 |
before 2:3.4.5~dfsg-2 | 2:3.4.5~dfsg-2 |
sambaDebian:14 |
before 2:3.4.5~dfsg-2 | 2:3.4.5~dfsg-2 |
sambaDebian:5.0 |
before 2:3.2.5-4lenny9, plus listed versions 2:3.2.5-42:3.2.5-4lenny12:3.2.5-4lenny22:3.2.5-4lenny32:3.2.5-4lenny42:3.2.5-4lenny62:3.2.5-4lenny72:3.2.5-4lenny8 |
2:3.2.5-4lenny9 |
samba3xRed Hat:enterprise_linux:5::client_workstation |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbind-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3xRed Hat:enterprise_linux:5::client |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-clientRed Hat:enterprise_linux:5::client |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-commonRed Hat:enterprise_linux:5::client |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
Show 52 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba3x-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-docRed Hat:enterprise_linux:5::client |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::client |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-swatRed Hat:enterprise_linux:5::client |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbindRed Hat:enterprise_linux:5::client |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3xRed Hat:enterprise_linux:5::server |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-clientRed Hat:enterprise_linux:5::server |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-commonRed Hat:enterprise_linux:5::server |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-docRed Hat:enterprise_linux:5::server |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-domainjoin-guiRed Hat:enterprise_linux:5::server |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-swatRed Hat:enterprise_linux:5::server |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbindRed Hat:enterprise_linux:5::server |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
samba3x-winbind-develRed Hat:enterprise_linux:5::server |
before 0:3.5.4-0.70.el5 | 0:3.5.4-0.70.el5 |
sambaRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
sambaRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
sambaRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
sambaRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-clientRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-commonRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
samba-swatRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.34.el4 | 0:3.0.33-0.34.el4 |
libsmbclientRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-clientRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-commonRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-swatRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
libsmbclient-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaRed Hat:enterprise_linux:5::client_workstation |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
libsmbclientRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
libsmbclient-develRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-clientRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-commonRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
samba-swatRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.29.el5_7.4 | 0:3.0.33-3.29.el5_7.4 |
sambaopenSUSE:Tumbleweed |
before 4.5.0-1.1 | 4.5.0-1.1 |
cifs-utilsopenSUSE:Tumbleweed |
before 6.5-1.5 | 6.5-1.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0547 is a low vulnerability (CVSS 2.1) in Samba, published February 4, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. Fixed in samba 2:3.4.5~dfsg-2.
References
vupen.com/english/advisories/2010/1062
secunia.com/advisories/39317
security.gentoo.org/glsa/glsa-201206-29.xml
securityfocus.com/bid/38326
git.samba.org?p=samba.git%3Ba=commit%3Bh=a065c177dfc8f968775593ba00dffafeebb2e054
mandriva.com/security/advisories?name=MDVSA-2010:090
Show 107 moreShow less
lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html
nvd.nist.gov/vuln/detail/CVE-2010-0547
git.samba.org?p=samba.git;a=commit;h=a065c177dfc8f968775593ba00dffafeebb2e054
github.com/advisories/GHSA-xppx-r8rj-fw45
security-tracker.debian.org/tracker/CVE-2010-0547
access.redhat.com/errata/RHBA-2011:0054
bugzilla.redhat.com/show_bug.cgi?id=459842
bugzilla.redhat.com/show_bug.cgi?id=480405
bugzilla.redhat.com/show_bug.cgi?id=527997
bugzilla.redhat.com/show_bug.cgi?id=560239
bugzilla.redhat.com/show_bug.cgi?id=565774
bugzilla.redhat.com/show_bug.cgi?id=565915
bugzilla.redhat.com/show_bug.cgi?id=568778
bugzilla.redhat.com/show_bug.cgi?id=582756
bugzilla.redhat.com/show_bug.cgi?id=590610
bugzilla.redhat.com/show_bug.cgi?id=590766
bugzilla.redhat.com/show_bug.cgi?id=596886
bugzilla.redhat.com/show_bug.cgi?id=609578
bugzilla.redhat.com/show_bug.cgi?id=641379
bugzilla.redhat.com/show_bug.cgi?id=643041
bugzilla.redhat.com/show_bug.cgi?id=649708
bugzilla.redhat.com/show_bug.cgi?id=651722
security.access.redhat.com/data/csaf/v2/advisories/2011/rhba-2011_0054.json
access.redhat.com/security/cve/CVE-2010-0547
bugzilla.redhat.com/show_bug.cgi?id=562156
cve.org/CVERecord?id=CVE-2010-0547
access.redhat.com/security/cve/CVE-2010-0787
bugzilla.redhat.com/show_bug.cgi?id=577277
cve.org/CVERecord?id=CVE-2010-0787
nvd.nist.gov/vuln/detail/CVE-2010-0787
access.redhat.com/errata/RHSA-2011:1219
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=695925
bugzilla.redhat.com/show_bug.cgi?id=721348
bugzilla.redhat.com/show_bug.cgi?id=722537
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1219.json
access.redhat.com/security/cve/CVE-2011-1678
cve.org/CVERecord?id=CVE-2011-1678
nvd.nist.gov/vuln/detail/CVE-2011-1678
access.redhat.com/security/cve/CVE-2011-2522
cve.org/CVERecord?id=CVE-2011-2522
nvd.nist.gov/vuln/detail/CVE-2011-2522
access.redhat.com/security/cve/CVE-2011-2694
cve.org/CVERecord?id=CVE-2011-2694
nvd.nist.gov/vuln/detail/CVE-2011-2694
access.redhat.com/security/cve/CVE-2011-3585
bugzilla.redhat.com/show_bug.cgi?id=742907
cve.org/CVERecord?id=CVE-2011-3585
nvd.nist.gov/vuln/detail/CVE-2011-3585
suse.com/security/cve/CVE-2009-1886
suse.com/security/cve/CVE-2009-1888
suse.com/security/cve/CVE-2009-2813
suse.com/security/cve/CVE-2009-2906
suse.com/security/cve/CVE-2009-2948
suse.com/security/cve/CVE-2010-0547
suse.com/security/cve/CVE-2010-0728
suse.com/security/cve/CVE-2010-0787
suse.com/security/cve/CVE-2010-0926
suse.com/security/cve/CVE-2010-1635
suse.com/security/cve/CVE-2010-1642
suse.com/security/cve/CVE-2010-2063
suse.com/security/cve/CVE-2010-3069
suse.com/security/cve/CVE-2011-0719
suse.com/security/cve/CVE-2011-2522
suse.com/security/cve/CVE-2011-2694
suse.com/security/cve/CVE-2012-0817
suse.com/security/cve/CVE-2012-0870
suse.com/security/cve/CVE-2012-1182
suse.com/security/cve/CVE-2012-2111
suse.com/security/cve/CVE-2012-6150
suse.com/security/cve/CVE-2013-0172
suse.com/security/cve/CVE-2013-0213
suse.com/security/cve/CVE-2013-0214
suse.com/security/cve/CVE-2013-0454
suse.com/security/cve/CVE-2013-1863
suse.com/security/cve/CVE-2013-4124
suse.com/security/cve/CVE-2013-4408
suse.com/security/cve/CVE-2013-4475
suse.com/security/cve/CVE-2013-4476
suse.com/security/cve/CVE-2013-4496
suse.com/security/cve/CVE-2013-6442
suse.com/security/cve/CVE-2014-0178
suse.com/security/cve/CVE-2014-0239
suse.com/security/cve/CVE-2014-0244
suse.com/security/cve/CVE-2014-3493
suse.com/security/cve/CVE-2014-3560
suse.com/security/cve/CVE-2014-8143
suse.com/security/cve/CVE-2015-0240
suse.com/security/cve/CVE-2015-3223
suse.com/security/cve/CVE-2015-5252
suse.com/security/cve/CVE-2015-5296
suse.com/security/cve/CVE-2015-5299
suse.com/security/cve/CVE-2015-5330
suse.com/security/cve/CVE-2015-5370
suse.com/security/cve/CVE-2015-7560
suse.com/security/cve/CVE-2015-8467
suse.com/security/cve/CVE-2015-8543
suse.com/security/cve/CVE-2016-0771
suse.com/security/cve/CVE-2016-2110
suse.com/security/cve/CVE-2016-2111
suse.com/security/cve/CVE-2016-2112
suse.com/security/cve/CVE-2016-2113
suse.com/security/cve/CVE-2016-2115
suse.com/security/cve/CVE-2016-2118
suse.com/security/cve/CVE-2016-2119
suse.com/security/cve/CVE-2012-1586