CVE-2010-1642 Denial of service in n/a
Remote attackers can crash the Samba smbd process by sending a malformed Session Setup AndX request with an invalid security blob length.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-1642?
CVE-2010-1642 is a medium-severity denial of service vulnerability in Samba Samba, published on 17 Jun 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.
Weakness: CWE-119
Which versions are affected by CVE-2010-1642?
It affects 1 product.
Products include Samba Samba.
How do I fix CVE-2010-1642?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2010-1642 being exploited?
There is no known exploitation of CVE-2010-1642 in the wild and no public exploit code.
Other vulnerabilities in Samba Samba
Sources
Also known as DEBIAN-CVE-2010-1642, ECHO-8835-82df-8867, GHSA-vh9v-2237-6qc2.