CVE-2012-1182 The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory a...
HighCVSS 10.0
EPSS 74.4%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/samba(Debian:12) | < 2:3.6.4-1 | 2:3.6.4-1 |
| debian/samba(Debian:13) | < 2:3.6.4-1 | 2:3.6.4-1 |
| debian/samba(Debian:14) | < 2:3.6.4-1 | 2:3.6.4-1 |
| samba | <= 3.4.15 | No fix listed |
| samba | = 3.0.0 | No fix listed |
| samba | = 3.0.1 | No fix listed |
| samba | = 3.0.2 | No fix listed |
| samba | = 3.0.2-a | No fix listed |
| samba | = 3.0.2a | No fix listed |
| samba | = 3.0.3 | No fix listed |
| samba | = 3.0.4 | No fix listed |
| samba | = 3.0.4-rc1 | No fix listed |
| samba | = 3.0.5 | No fix listed |
| samba | = 3.0.6 | No fix listed |
| samba | = 3.0.7 | No fix listed |
| samba | = 3.0.8 | No fix listed |
| samba | = 3.0.9 | No fix listed |
| samba | = 3.0.10 | No fix listed |
| samba | = 3.0.11 | No fix listed |
| samba | = 3.0.12 | No fix listed |
| samba | = 3.0.13 | No fix listed |
| samba | = 3.0.14 | No fix listed |
| samba | = 3.0.14-a | No fix listed |
| samba | = 3.0.14a | No fix listed |
| samba | = 3.0.15 | No fix listed |
Show 122 more
| Product | Affected versions | Fixed in |
|---|---|---|
| samba | = 3.0.16 | No fix listed |
| samba | = 3.0.17 | No fix listed |
| samba | = 3.0.18 | No fix listed |
| samba | = 3.0.19 | No fix listed |
| samba | = 3.0.20 | No fix listed |
| samba | = 3.0.20-a | No fix listed |
| samba | = 3.0.20-b | No fix listed |
| samba | = 3.0.20a | No fix listed |
| samba | = 3.0.20b | No fix listed |
| samba | = 3.0.21 | No fix listed |
| samba | = 3.0.21-a | No fix listed |
| samba | = 3.0.21-b | No fix listed |
| samba | = 3.0.21-c | No fix listed |
| samba | = 3.0.21a | No fix listed |
| samba | = 3.0.21b | No fix listed |
| samba | = 3.0.21c | No fix listed |
| samba | = 3.0.22 | No fix listed |
| samba | = 3.0.23 | No fix listed |
| samba | = 3.0.23-a | No fix listed |
| samba | = 3.0.23-b | No fix listed |
| samba | = 3.0.23-c | No fix listed |
| samba | = 3.0.23-d | No fix listed |
| samba | = 3.0.23a | No fix listed |
| samba | = 3.0.23b | No fix listed |
| samba | = 3.0.23c | No fix listed |
| samba | = 3.0.23d | No fix listed |
| samba | = 3.0.24 | No fix listed |
| samba | = 3.0.25 | No fix listed |
| samba | = 3.0.25-a | No fix listed |
| samba | = 3.0.25-b | No fix listed |
| samba | = 3.0.25-c | No fix listed |
| samba | = 3.0.25-pre1 | No fix listed |
| samba | = 3.0.25-pre2 | No fix listed |
| samba | = 3.0.25-rc1 | No fix listed |
| samba | = 3.0.25-rc2 | No fix listed |
| samba | = 3.0.25-rc3 | No fix listed |
| samba | = 3.0.25a | No fix listed |
| samba | = 3.0.25b | No fix listed |
| samba | = 3.0.25c | No fix listed |
| samba | = 3.0.26 | No fix listed |
| samba | = 3.0.26-a | No fix listed |
| samba | = 3.0.26a | No fix listed |
| samba | = 3.0.27 | No fix listed |
| samba | = 3.0.27-a | No fix listed |
| samba | = 3.0.28 | No fix listed |
| samba | = 3.0.28-a | No fix listed |
| samba | = 3.0.29 | No fix listed |
| samba | = 3.0.30 | No fix listed |
| samba | = 3.0.31 | No fix listed |
| samba | = 3.0.32 | No fix listed |
| samba | = 3.0.33 | No fix listed |
| samba | = 3.0.34 | No fix listed |
| samba | = 3.0.35 | No fix listed |
| samba | = 3.0.36 | No fix listed |
| samba | = 3.0.37 | No fix listed |
| samba | = 3.1.0 | No fix listed |
| samba | = 3.2.0 | No fix listed |
| samba | = 3.2.1 | No fix listed |
| samba | = 3.2.2 | No fix listed |
| samba | = 3.2.3 | No fix listed |
| samba | = 3.2.4 | No fix listed |
| samba | = 3.2.5 | No fix listed |
| samba | = 3.2.6 | No fix listed |
| samba | = 3.2.7 | No fix listed |
| samba | = 3.2.8 | No fix listed |
| samba | = 3.2.9 | No fix listed |
| samba | = 3.2.10 | No fix listed |
| samba | = 3.2.11 | No fix listed |
| samba | = 3.2.12 | No fix listed |
| samba | = 3.2.13 | No fix listed |
| samba | = 3.2.14 | No fix listed |
| samba | = 3.2.15 | No fix listed |
| samba | = 3.3.0 | No fix listed |
| samba | = 3.3.1 | No fix listed |
| samba | = 3.3.2 | No fix listed |
| samba | = 3.3.3 | No fix listed |
| samba | = 3.3.4 | No fix listed |
| samba | = 3.3.5 | No fix listed |
| samba | = 3.3.6 | No fix listed |
| samba | = 3.3.7 | No fix listed |
| samba | = 3.3.8 | No fix listed |
| samba | = 3.3.9 | No fix listed |
| samba | = 3.3.10 | No fix listed |
| samba | = 3.3.11 | No fix listed |
| samba | = 3.3.12 | No fix listed |
| samba | = 3.3.13 | No fix listed |
| samba | = 3.3.14 | No fix listed |
| samba | = 3.3.15 | No fix listed |
| samba | = 3.3.16 | No fix listed |
| samba | = 3.4.0 | No fix listed |
| samba | = 3.4.1 | No fix listed |
| samba | = 3.4.2 | No fix listed |
| samba | = 3.4.3 | No fix listed |
| samba | = 3.4.4 | No fix listed |
| samba | = 3.4.5 | No fix listed |
| samba | = 3.4.6 | No fix listed |
| samba | = 3.4.7 | No fix listed |
| samba | = 3.4.8 | No fix listed |
| samba | = 3.4.9 | No fix listed |
| samba | = 3.4.10 | No fix listed |
| samba | = 3.4.11 | No fix listed |
| samba | = 3.4.12 | No fix listed |
| samba | = 3.4.13 | No fix listed |
| samba | = 3.4.14 | No fix listed |
| samba | = 3.5.0 | No fix listed |
| samba | = 3.5.1 | No fix listed |
| samba | = 3.5.2 | No fix listed |
| samba | = 3.5.3 | No fix listed |
| samba | = 3.5.4 | No fix listed |
| samba | = 3.5.5 | No fix listed |
| samba | = 3.5.6 | No fix listed |
| samba | = 3.5.7 | No fix listed |
| samba | = 3.5.8 | No fix listed |
| samba | = 3.5.9 | No fix listed |
| samba | = 3.5.10 | No fix listed |
| samba | = 3.5.11 | No fix listed |
| samba | = 3.5.12 | No fix listed |
| samba | = 3.5.13 | No fix listed |
| samba | = 3.6.0 | No fix listed |
| samba | = 3.6.1 | No fix listed |
| samba | = 3.6.2 | No fix listed |
| samba | = 3.6.3 | No fix listed |
References
- Debian Security Tracker CVE-2012-1182 vendor-advisory
- bugs.debian.org issue-tracking
- APPLE-SA-2012-05-09-1 vendor-advisory
- FEDORA-2012-5843 vendor-advisory
- FEDORA-2012-5793 vendor-advisory
- FEDORA-2012-5805 vendor-advisory
- FEDORA-2012-6382 vendor-advisory
- SUSE-SU-2012:0501 vendor-advisory
- SUSE-SU-2012:0502 vendor-advisory
- SUSE-SU-2012:0504 vendor-advisory
- SUSE-SU-2012:0515 vendor-advisory
- HPSBMU02790 vendor-advisory
- HPSBUX02789 vendor-advisory
- 48751 third-party-advisory
- 48754 third-party-advisory
- 48816 third-party-advisory
- 48818 third-party-advisory
- 48844 third-party-advisory
- 48873 third-party-advisory
- 48879 third-party-advisory
- 48999 third-party-advisory
- support.apple.com
- www.collax.com
- DSA-2450 vendor-advisory
- MDVSA-2012:055 vendor-advisory
- www.samba.org
- 1026913 vdb-entry
- USN-1423-1 vendor-advisory
- www.samba.org vendor-advisory