CVE-2010-2063
samba - arbitrary code execution
EPSS 78.7%
描述
Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.
如何修補 CVE-2010-2063
要修補 CVE-2010-2063,請將受影響套件升級到下列已修補版本。
- Debian/samba—升級至 2:3.4.0~pre1-1 或更新版本
- Debian/samba—升級至 2:3.2.5-4lenny12 或更新版本
CVE-2010-2063 正在被利用嗎?
可能 — EPSS 為 78.7%,屬於高被利用機率區間,建議優先修補。
受影響套件(2)
- from 0, < 2:3.4.0~pre1-1
- from 0, < 2:3.2.5-4lenny12