CVE-2010-0547: Samba

Low severity, CVSS 2.1. EPSS: 0.5% chance of exploitation in the next 30 days.

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.

Affected products

• Samba Samba: up to and including 3.4.5; version 1.9.17 only; version 1.9.18 only; version 2.2.0 only; version 2.2.0a only; version 2.2.1 only; …

Published 2010-02-04. Last modified 2026-06-16.