CVE-2010-2063: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 78.6% chance of exploitation in the next 30 days.

Buffer overflow in the SMB1 packet chaining implementation in the chain_reply function in process.c in smbd in Samba 3.0.x before 3.3.13 allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a crafted field in a packet.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 8.04 only; version 9.04 only
• Debian Debian Linux: version 5.0 only
• Samba Samba: from 3.0.0, up to and including 3.3.12

Published 2010-06-17. Last modified 2026-06-16.