CVE-2010-1635

Publication date 17 June 2010

Last updated 24 July 2024

Ubuntu priority

Negligible

Why this priority?

The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.

Read the notes from the security team

Status

Package Ubuntu Release Status
samba 10.04 LTS lucid Ignored
9.10 karmic Ignored
9.04 jaunty Ignored
8.04 LTS hardy Ignored
6.06 LTS dapper Ignored

Notes

mdeslaur

only crashes single connection, not service, so ignoring

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
samba