{"id":"CVE-2010-1642","aliases":["DEBIAN-CVE-2010-1642","EUVD-2010-1663","GHSA-vh9v-2237-6qc2","openSUSE-SU-2024:10069-1"],"status":"published","title":"The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x...","description":"The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \\xff\\xff security blob length in a Session Setup AndX request.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03584,"percentile":0.89493,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2010-06-17T16:00:00Z","modified":"2026-10-23T17:47:25Z","fixes":[{"ecosystem":"Debian:12","package":"samba","fixed_in":["2:3.5.4~dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"samba","fixed_in":["2:3.5.4~dfsg-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"samba","fixed_in":["2:3.5.4~dfsg-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.5.4~dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.5.4~dfsg-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.5.4~dfsg-2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"samba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.0-1.1"}]}],"bundled":56}],"products":[{"vendor":"samba","product":"samba"}],"references":[{"url":"http://www.stratsec.net/Research/Advisories/Samba-Multiple-DoS-Vulnerabilities-%28SS-2010-005%29","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"http://samba.org/samba/history/samba-3.4.8.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:141","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred","advisory"]},{"url":"http://samba.org/samba/history/samba-3.5.2.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=594921","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=9280051bfba337458722fb157f3082f93cbd9f2b","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://security-tracker.debian.org/tracker/CVE-2010-1642","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=7254","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"http://www.securityfocus.com/bid/40097","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","evidence"]},{"url":"http://www.vupen.com/english/advisories/2010/1933","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1642"},{"url":"http://git.samba.org/?p=samba.git;a=commit;h=9280051bfba337458722fb157f3082f93cbd9f2b"},{"url":"http://www.stratsec.net/Research/Advisories/Samba-Multiple-DoS-Vulnerabilities-(SS-2010-005)"},{"url":"https://github.com/advisories/GHSA-vh9v-2237-6qc2"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-1642","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1886","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2813","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2906","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-2948","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0787","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0926","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2063","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3069","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0719","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-2694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0817","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0172","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1863","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4475","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4476","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8143","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5296","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5370","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7560","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2111","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2112","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2113","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2115","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2119","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2010-1642","description":"The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \\xff\\xff security blob length in a Session Setup AndX request.","status":"published","published":"2010-06-17T16:00:00Z","modified":"2024-08-07T01:28:42.967Z","updated_at":"2026-11-02T14:33:29.227451Z"}],"euvd":[{"id":"EUVD-2010-1663","description":"The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \\xff\\xff security blob length in a Session Setup AndX request.","status":"published","published":"2010-06-17T16:00:00Z","modified":"2024-08-07T01:28:42Z","updated_at":"2026-11-03T01:39:40.77222Z"}],"ghsa":[{"id":"GHSA-vh9v-2237-6qc2","title":"The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x...","description":"The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \\xff\\xff security blob length in a Session Setup AndX request.","status":"published","published":"2022-05-14T02:16:33Z","modified":"2023-02-13T06:32:16Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:54:07.010181Z"}],"nvd":[{"id":"CVE-2010-1642","description":"The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \\xff\\xff security blob length in a Session Setup AndX request.","status":"published","published":"2010-06-17T16:30:01.873Z","modified":"2026-06-16T23:18:46.24Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:47.724369Z"}],"osv":[{"id":"CVE-2010-1642","description":"The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \\xff\\xff security blob length in a Session Setup AndX request.","status":"published","published":"2010-06-17T16:30:01Z","modified":"2026-04-10T03:41:13.805595Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2010-1642","description":"The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \\xff\\xff security blob length in a Session Setup AndX request.","status":"published","published":"2010-06-17T16:30:01.873Z","modified":"2026-10-23T17:47:25.559468966Z","updated_at":"2026-11-02T15:45:24.316685Z"},{"id":"openSUSE-SU-2024:10069-1","title":"ctdb-4.5.0-1.1 on GA media","description":"These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:47:57.807269Z","updated_at":"2026-11-02T16:58:33.135986Z"}]}}