CVE-2010-0547 Denial of service in n/a
Local attackers can corrupt the mtab file via crafted strings in mount.cifs, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-0547?
CVE-2010-0547 is a low-severity denial of service vulnerability in Samba Samba, published on 4 Feb 2010. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Weakness: CWE-20
Which versions are affected by CVE-2010-0547?
It affects 1 product.
Products include Samba Samba.
How do I fix CVE-2010-0547?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2010-0547 being exploited?
There is no known exploitation of CVE-2010-0547 in the wild and no public exploit code.
Other vulnerabilities in Samba Samba
Sources
Also known as DEBIAN-CVE-2010-0547, ECHO-0617-1c40-548b, GHSA-xppx-r8rj-fw45.