Approved changes feed: RSS · Atom
cpe:2.3:a:samba:samba:3.5:*:*:*:*:*:*:*
part: a version: 3.5 update: *
| Vendor | Samba (e90b9146-231c-5d4c-abab-30ee379c95a2) |
|---|---|
| Product | Samba (19c5014a-3c29-57af-83eb-c04c4b75a29f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/samba-team/samba |
purl2cpe | 2026-06-01 10:11:05.920799 |
pkg:gitlab/samba-team/samba |
purl2cpe | 2026-06-01 10:11:05.920801 |
pkg:samba/samba |
purl2cpe | 2026-06-01 10:11:05.920803 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-1642 |
vulnerable | 2026-06-08 04:54:09.575981 |
Details available
The reply_sesssetup_and_X_spnego function in sesssetup.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to trigger an out-of-bounds read, and cause a denial of service (process crash), via a \xff\xff security blob length in a Session Setup AndX request.
Published: 2010-06-17T16:00:00.000Z
Updated: 2024-08-07T01:28:42.967Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-1635 |
vulnerable | 2026-06-08 04:54:09.523827 |
Details available
The chain_reply function in process.c in smbd in Samba before 3.4.8 and 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash) via a Negotiate Protocol request with a certain 0x0003 field value followed by a Session Setup AndX request with a certain 0x8003 field value.
Published: 2010-06-17T16:00:00.000Z
Updated: 2024-08-07T01:28:43.269Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.