Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2010-2063

84
FAUCET Score

CVE-2010-2063 describes a buffer overflow vulnerability in the SMB1 packet chaining implementation within Samba's smbd daemon, affecting versions 3.0.x before 3.3.13. This flaw allows remote attackers to trigger a denial of service through memory corruption, potentially leading to arbitrary code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, exploit intelligence indicates the existence of a Metasploit module and an ExploitDB entry, suggesting readily available exploit code. Community discussion and media coverage are limited, but the high EPSS and FAUCET Risk Scores highlight its potential for exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
>= 3.0.0, <= 3.3.12CPE matchmatch criteria
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
6.06CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
8.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
9.04CPE matchmatch criteria
cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
5.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.5HIGH

AV:N/AC:L/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
78.70%
Probability of exploitation in next 30 days
EPSS Percentile
99.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
Metasploit: Samba chain_reply Memory Corruption (Linux x86) · Jun 16, 2010
ExploitDB: EDB-16860 · Sep 4, 2010
This CVE's current EPSS score of 0.7870 is in the 99th percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: samba-0:3.0.9-1.3E.17
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: samba-0:3.0.33-0.19.el4_8.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4.7 Z StreamFixed in: samba-0:3.0.28-0.10.el4_7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: samba-0:3.0.33-3.29.el5_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: samba3x-0:3.3.8-0.52.el5_5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5.3.Z - Server OnlyFixed in: samba-0:3.0.33-3.7.el5_3.2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5.4.Z - Server OnlyFixed in: samba-0:3.0.33-3.15.el5_4.2
View patch

Vendor Advisories (1)

redhatCVE-2010-2063Critical

samba: memory corruption vulnerability

Jun 16, 2010

References

labs.idefense.com / intelligence/vulnerabilities/display.php
Broken Link
lists.apple.com / archives/security-announce/2010//Aug/msg00003.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2010-08/msg00001.html
Mailing ListThird Party Advisory
marc.info
Mailing ListThird Party Advisory
marc.info
Mailing ListThird Party Advisory
marc.info
Mailing ListPatchThird Party Advisory
osvdb.org / 65518
Broken Link
secunia.com / advisories/40145
Third Party Advisory
secunia.com / advisories/40210
Third Party Advisory
secunia.com / advisories/40221
Third Party Advisory
secunia.com / advisories/40293
Third Party Advisory
secunia.com / advisories/42319
Third Party Advisory
exchange.xforce.ibmcloud.com / vulnerabilities/59481
Third Party AdvisoryVDB Entry
slackware.com / security/viewer.php
Mailing ListThird Party Advisory
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12427
Third Party Advisory
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7115
Third Party Advisory
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9859
Third Party Advisory
support.apple.com / kb/HT4312
Third Party Advisory
ubuntu.com / usn/usn-951-1
Third Party Advisory
debian.org / security/2010/dsa-2061
Third Party Advisory
mandriva.com / security/advisories
Third Party Advisory
redhat.com / support/errata/RHSA-2010-0488.html
Third Party Advisory
samba.org / samba/ftp/history/samba-3.3.13.html
Vendor Advisory
samba.org / samba/ftp/patches/security/samba-3.0.37-CVE-2010-2063.patch
PatchVendor Advisory
samba.org / samba/ftp/patches/security/samba-3.3.12-CVE-2010-2063.patch
PatchVendor Advisory
samba.org / samba/security/CVE-2010-2063.html
Vendor Advisory
securityfocus.com / bid/40884
Third Party AdvisoryVDB Entry
securitytracker.com / id
Third Party AdvisoryVDB Entry
vupen.com / english/advisories/2010/1486
Permissions Required
vupen.com / english/advisories/2010/1504
Permissions Required
vupen.com / english/advisories/2010/1505
Permissions Required
vupen.com / english/advisories/2010/1507
Permissions Required
vupen.com / english/advisories/2010/1517
Permissions Required
vupen.com / english/advisories/2010/3063
Permissions Required