Red Hat Security AdvisoryRHSA-2012:0466
samba3x security update
Released 2012-04-10 · Red Hat rating Critical · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) samba3x-3.5.10-0.108.el5_8, samba3x-winbind-devel-3.5.10-0.108.el5_8, samba3x-winbind-devel-3.5.10-0.108.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) samba3x-3.5.10-0.108.el5_8, samba3x-3.5.10-0.108.el5_8.i386, samba3x-3.5.10-0.108.el5_8.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) samba3x-3.5.10-0.108.el5_8, samba3x-3.5.10-0.108.el5_8.i386, samba3x-client-3.5.10-0.108.el5_8 +11
- Red Hat Enterprise Linux EUS (v. 5.6 server) samba3x-3.5.4-0.70.el5_6.2, samba3x-3.5.4-0.70.el5_6.2.i386, samba3x-3.5.4-0.70.el5_6.2.ia64 +29
Fixes 1 record
Priority HIGH 81
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which all…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.74371 · Published 2012-04-10 · Fixed CWE-189
