The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-189 and the CVSS impact.
Summary
The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 144
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* | up to 3.4.15 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:* | 3.0.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:* | 3.0.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:* | 3.0.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:* | 3.0.2 a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:* | 3.0.2a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:* | 3.0.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:* | 3.0.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:* | 3.0.4 rc1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:* | 3.0.5 | Vulnerable | Samba |
- cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* Versions up to 3.4.15 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.2:a:*:*:*:*:*:* Versions 3.0.2 a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.2a:*:*:*:*:*:*:* Versions 3.0.2a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.4:*:*:*:*:*:*:* Versions 3.0.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.4:rc1:*:*:*:*:*:* Versions 3.0.4 rc1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.5:*:*:*:*:*:*:* Versions 3.0.5 Vulnerable ·Samba
Show 134 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:* | 3.0.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:* | 3.0.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:* | 3.0.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:* | 3.0.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:* | 3.0.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:* | 3.0.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:* | 3.0.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:* | 3.0.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:* | 3.0.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:* | 3.0.14 a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:* | 3.0.14a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:* | 3.0.15 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:* | 3.0.16 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:* | 3.0.17 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:* | 3.0.18 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:* | 3.0.19 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:* | 3.0.20 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20:a:*:*:*:*:*:* | 3.0.20 a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20:b:*:*:*:*:*:* | 3.0.20 b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:* | 3.0.20a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:* | 3.0.20b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:* | 3.0.21 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21:a:*:*:*:*:*:* | 3.0.21 a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21:b:*:*:*:*:*:* | 3.0.21 b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21:c:*:*:*:*:*:* | 3.0.21 c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:* | 3.0.21a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:* | 3.0.21b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:* | 3.0.21c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:* | 3.0.22 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:* | 3.0.23 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23:a:*:*:*:*:*:* | 3.0.23 a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23:b:*:*:*:*:*:* | 3.0.23 b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23:c:*:*:*:*:*:* | 3.0.23 c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23:d:*:*:*:*:*:* | 3.0.23 d | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:* | 3.0.23a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:* | 3.0.23b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:* | 3.0.23c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:* | 3.0.23d | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:* | 3.0.24 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:* | 3.0.25 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:a:*:*:*:*:*:* | 3.0.25 a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:b:*:*:*:*:*:* | 3.0.25 b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:c:*:*:*:*:*:* | 3.0.25 c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:* | 3.0.25 pre1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:* | 3.0.25 pre2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:* | 3.0.25 rc1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:* | 3.0.25 rc2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:* | 3.0.25 rc3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:* | 3.0.25a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:* | 3.0.25b | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:* | 3.0.25c | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:* | 3.0.26 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.26:a:*:*:*:*:*:* | 3.0.26 a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:* | 3.0.26a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:* | 3.0.27 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.27:a:*:*:*:*:*:* | 3.0.27 a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:* | 3.0.28 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.28:a:*:*:*:*:*:* | 3.0.28 a | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:* | 3.0.29 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:* | 3.0.30 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:* | 3.0.31 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:* | 3.0.32 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:* | 3.0.33 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:* | 3.0.34 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:* | 3.0.35 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:* | 3.0.36 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:* | 3.0.37 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.1.0:*:*:*:*:*:*:* | 3.1.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:* | 3.2.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:* | 3.2.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:* | 3.2.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:* | 3.2.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:* | 3.2.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:* | 3.2.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:* | 3.2.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:* | 3.2.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:* | 3.2.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:* | 3.2.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:* | 3.2.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:* | 3.2.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:* | 3.2.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:* | 3.2.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:* | 3.2.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:* | 3.2.15 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:* | 3.3.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:* | 3.3.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:* | 3.3.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:* | 3.3.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:* | 3.3.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:* | 3.3.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:* | 3.3.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:* | 3.3.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:* | 3.3.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:* | 3.3.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:* | 3.3.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.11:*:*:*:*:*:*:* | 3.3.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.12:*:*:*:*:*:*:* | 3.3.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.13:*:*:*:*:*:*:* | 3.3.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.14:*:*:*:*:*:*:* | 3.3.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.15:*:*:*:*:*:*:* | 3.3.15 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.3.16:*:*:*:*:*:*:* | 3.3.16 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:* | 3.4.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:* | 3.4.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:* | 3.4.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:* | 3.4.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:* | 3.4.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.5:*:*:*:*:*:*:* | 3.4.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.6:*:*:*:*:*:*:* | 3.4.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.7:*:*:*:*:*:*:* | 3.4.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.8:*:*:*:*:*:*:* | 3.4.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.9:*:*:*:*:*:*:* | 3.4.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.10:*:*:*:*:*:*:* | 3.4.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.11:*:*:*:*:*:*:* | 3.4.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.12:*:*:*:*:*:*:* | 3.4.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.13:*:*:*:*:*:*:* | 3.4.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.4.14:*:*:*:*:*:*:* | 3.4.14 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:* | 3.5.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:* | 3.5.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:* | 3.5.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:* | 3.5.3 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:* | 3.5.4 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:* | 3.5.5 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:* | 3.5.6 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.7:*:*:*:*:*:*:* | 3.5.7 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.8:*:*:*:*:*:*:* | 3.5.8 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.9:*:*:*:*:*:*:* | 3.5.9 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.10:*:*:*:*:*:*:* | 3.5.10 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.11:*:*:*:*:*:*:* | 3.5.11 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.12:*:*:*:*:*:*:* | 3.5.12 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.5.13:*:*:*:*:*:*:* | 3.5.13 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:* | 3.6.0 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:* | 3.6.1 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:* | 3.6.2 | Vulnerable | Samba |
| cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:* | 3.6.3 | Vulnerable | Samba |
- cpe:2.3:a:samba:samba:3.0.6:*:*:*:*:*:*:* Versions 3.0.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.7:*:*:*:*:*:*:* Versions 3.0.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.8:*:*:*:*:*:*:* Versions 3.0.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.9:*:*:*:*:*:*:* Versions 3.0.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.10:*:*:*:*:*:*:* Versions 3.0.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.11:*:*:*:*:*:*:* Versions 3.0.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.12:*:*:*:*:*:*:* Versions 3.0.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.13:*:*:*:*:*:*:* Versions 3.0.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.14:*:*:*:*:*:*:* Versions 3.0.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.14:a:*:*:*:*:*:* Versions 3.0.14 a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.14a:*:*:*:*:*:*:* Versions 3.0.14a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.15:*:*:*:*:*:*:* Versions 3.0.15 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.16:*:*:*:*:*:*:* Versions 3.0.16 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.17:*:*:*:*:*:*:* Versions 3.0.17 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.18:*:*:*:*:*:*:* Versions 3.0.18 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.19:*:*:*:*:*:*:* Versions 3.0.19 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20:*:*:*:*:*:*:* Versions 3.0.20 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20:a:*:*:*:*:*:* Versions 3.0.20 a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20:b:*:*:*:*:*:* Versions 3.0.20 b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20a:*:*:*:*:*:*:* Versions 3.0.20a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.20b:*:*:*:*:*:*:* Versions 3.0.20b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21:*:*:*:*:*:*:* Versions 3.0.21 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21:a:*:*:*:*:*:* Versions 3.0.21 a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21:b:*:*:*:*:*:* Versions 3.0.21 b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21:c:*:*:*:*:*:* Versions 3.0.21 c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21a:*:*:*:*:*:*:* Versions 3.0.21a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21b:*:*:*:*:*:*:* Versions 3.0.21b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.21c:*:*:*:*:*:*:* Versions 3.0.21c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.22:*:*:*:*:*:*:* Versions 3.0.22 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23:*:*:*:*:*:*:* Versions 3.0.23 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23:a:*:*:*:*:*:* Versions 3.0.23 a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23:b:*:*:*:*:*:* Versions 3.0.23 b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23:c:*:*:*:*:*:* Versions 3.0.23 c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23:d:*:*:*:*:*:* Versions 3.0.23 d Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23a:*:*:*:*:*:*:* Versions 3.0.23a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23b:*:*:*:*:*:*:* Versions 3.0.23b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23c:*:*:*:*:*:*:* Versions 3.0.23c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.23d:*:*:*:*:*:*:* Versions 3.0.23d Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.24:*:*:*:*:*:*:* Versions 3.0.24 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:*:*:*:*:*:*:* Versions 3.0.25 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:a:*:*:*:*:*:* Versions 3.0.25 a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:b:*:*:*:*:*:* Versions 3.0.25 b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:c:*:*:*:*:*:* Versions 3.0.25 c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:pre1:*:*:*:*:*:* Versions 3.0.25 pre1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:pre2:*:*:*:*:*:* Versions 3.0.25 pre2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:rc1:*:*:*:*:*:* Versions 3.0.25 rc1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:rc2:*:*:*:*:*:* Versions 3.0.25 rc2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25:rc3:*:*:*:*:*:* Versions 3.0.25 rc3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25a:*:*:*:*:*:*:* Versions 3.0.25a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25b:*:*:*:*:*:*:* Versions 3.0.25b Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.25c:*:*:*:*:*:*:* Versions 3.0.25c Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.26:*:*:*:*:*:*:* Versions 3.0.26 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.26:a:*:*:*:*:*:* Versions 3.0.26 a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.26a:*:*:*:*:*:*:* Versions 3.0.26a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.27:*:*:*:*:*:*:* Versions 3.0.27 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.27:a:*:*:*:*:*:* Versions 3.0.27 a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.28:*:*:*:*:*:*:* Versions 3.0.28 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.28:a:*:*:*:*:*:* Versions 3.0.28 a Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.29:*:*:*:*:*:*:* Versions 3.0.29 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.30:*:*:*:*:*:*:* Versions 3.0.30 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.31:*:*:*:*:*:*:* Versions 3.0.31 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.32:*:*:*:*:*:*:* Versions 3.0.32 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.33:*:*:*:*:*:*:* Versions 3.0.33 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.34:*:*:*:*:*:*:* Versions 3.0.34 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.35:*:*:*:*:*:*:* Versions 3.0.35 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.36:*:*:*:*:*:*:* Versions 3.0.36 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.0.37:*:*:*:*:*:*:* Versions 3.0.37 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.0:*:*:*:*:*:*:* Versions 3.2.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.2:*:*:*:*:*:*:* Versions 3.2.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.3:*:*:*:*:*:*:* Versions 3.2.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.4:*:*:*:*:*:*:* Versions 3.2.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.5:*:*:*:*:*:*:* Versions 3.2.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.6:*:*:*:*:*:*:* Versions 3.2.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.7:*:*:*:*:*:*:* Versions 3.2.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.8:*:*:*:*:*:*:* Versions 3.2.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.9:*:*:*:*:*:*:* Versions 3.2.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.10:*:*:*:*:*:*:* Versions 3.2.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.11:*:*:*:*:*:*:* Versions 3.2.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.12:*:*:*:*:*:*:* Versions 3.2.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.13:*:*:*:*:*:*:* Versions 3.2.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.14:*:*:*:*:*:*:* Versions 3.2.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.2.15:*:*:*:*:*:*:* Versions 3.2.15 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.0:*:*:*:*:*:*:* Versions 3.3.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.1:*:*:*:*:*:*:* Versions 3.3.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.2:*:*:*:*:*:*:* Versions 3.3.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.3:*:*:*:*:*:*:* Versions 3.3.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.4:*:*:*:*:*:*:* Versions 3.3.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.5:*:*:*:*:*:*:* Versions 3.3.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.6:*:*:*:*:*:*:* Versions 3.3.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.7:*:*:*:*:*:*:* Versions 3.3.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.8:*:*:*:*:*:*:* Versions 3.3.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.9:*:*:*:*:*:*:* Versions 3.3.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.10:*:*:*:*:*:*:* Versions 3.3.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.11:*:*:*:*:*:*:* Versions 3.3.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.12:*:*:*:*:*:*:* Versions 3.3.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.13:*:*:*:*:*:*:* Versions 3.3.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.14:*:*:*:*:*:*:* Versions 3.3.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.15:*:*:*:*:*:*:* Versions 3.3.15 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.3.16:*:*:*:*:*:*:* Versions 3.3.16 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.0:*:*:*:*:*:*:* Versions 3.4.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.1:*:*:*:*:*:*:* Versions 3.4.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.2:*:*:*:*:*:*:* Versions 3.4.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.3:*:*:*:*:*:*:* Versions 3.4.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.4:*:*:*:*:*:*:* Versions 3.4.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.5:*:*:*:*:*:*:* Versions 3.4.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.6:*:*:*:*:*:*:* Versions 3.4.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.7:*:*:*:*:*:*:* Versions 3.4.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.8:*:*:*:*:*:*:* Versions 3.4.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.9:*:*:*:*:*:*:* Versions 3.4.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.10:*:*:*:*:*:*:* Versions 3.4.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.11:*:*:*:*:*:*:* Versions 3.4.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.12:*:*:*:*:*:*:* Versions 3.4.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.13:*:*:*:*:*:*:* Versions 3.4.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.4.14:*:*:*:*:*:*:* Versions 3.4.14 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.0:*:*:*:*:*:*:* Versions 3.5.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.1:*:*:*:*:*:*:* Versions 3.5.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.2:*:*:*:*:*:*:* Versions 3.5.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.3:*:*:*:*:*:*:* Versions 3.5.3 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.4:*:*:*:*:*:*:* Versions 3.5.4 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.5:*:*:*:*:*:*:* Versions 3.5.5 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.6:*:*:*:*:*:*:* Versions 3.5.6 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.7:*:*:*:*:*:*:* Versions 3.5.7 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.8:*:*:*:*:*:*:* Versions 3.5.8 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.9:*:*:*:*:*:*:* Versions 3.5.9 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.10:*:*:*:*:*:*:* Versions 3.5.10 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.11:*:*:*:*:*:*:* Versions 3.5.11 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.12:*:*:*:*:*:*:* Versions 3.5.12 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.5.13:*:*:*:*:*:*:* Versions 3.5.13 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.6.0:*:*:*:*:*:*:* Versions 3.6.0 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.6.1:*:*:*:*:*:*:* Versions 3.6.1 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.6.2:*:*:*:*:*:*:* Versions 3.6.2 Vulnerable ·Samba
- cpe:2.3:a:samba:samba:3.6.3:*:*:*:*:*:*:* Versions 3.6.3 Vulnerable ·Samba
Remediation
Red Hat 5 advisories
- RHSA-2013:0515 Released 2013-02-20 · Red Hat rating Moderateopenchange security, bug fix and enhancement update
- Red Hat Enterprise Linux Desktop (v. 6) evolution-mapi-0.28.3-12.el6, openchange-1.0-4.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) evolution-mapi-0.28.3-12.el6, evolution-mapi-devel-0.28.3-12.el6, openchange-1.0-4.el6 +3
- Red Hat Enterprise Linux Server Optional (v. 6) evolution-mapi-0.28.3-12.el6, evolution-mapi-devel-0.28.3-12.el6, openchange-1.0-4.el6 +3
- Red Hat Enterprise Linux Workstation (v. 6) evolution-mapi-0.28.3-12.el6, openchange-1.0-4.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) evolution-mapi-0.28.3-12.el6, evolution-mapi-devel-0.28.3-12.el6, openchange-1.0-4.el6 +3
- RHSA-2013:0506 Released 2013-02-20 · Red Hat rating Moderatesamba4 security, bug fix and enhancement update
- Red Hat Enterprise Linux Desktop (v. 6) samba4-4.0.0-55.el6.rc4, samba4-client-4.0.0-55.el6.rc4, samba4-common-4.0.0-55.el6.rc4 +11
- Red Hat Enterprise Linux HPC Node (v. 6) samba4-4.0.0-55.el6.rc4, samba4-client-4.0.0-55.el6.rc4, samba4-common-4.0.0-55.el6.rc4 +11
- Red Hat Enterprise Linux Server (v. 6) samba4-4.0.0-55.el6.rc4, samba4-client-4.0.0-55.el6.rc4, samba4-common-4.0.0-55.el6.rc4 +11
- Red Hat Enterprise Linux Workstation (v. 6) samba4-4.0.0-55.el6.rc4, samba4-client-4.0.0-55.el6.rc4, samba4-common-4.0.0-55.el6.rc4 +11
- RHSA-2012:0478 Released 2012-04-13 · Red Hat rating Criticalsamba security update
- Red Hat Enterprise Linux AS (v. 4 ELS) samba-3.0.33-3.36.el4, samba-3.0.33-3.36.el4.i386, samba-3.0.33-3.36.el4.ia64 +9
- Red Hat Enterprise Linux ES (v. 4 ELS) samba-3.0.33-3.36.el4, samba-3.0.33-3.36.el4.i386, samba-client-3.0.33-3.36.el4 +5
Show 2 more Red Hat advisories
- RHSA-2012:0465 Released 2012-04-10 · Red Hat rating Criticalsamba security update
- RHEL Desktop Workstation (v. 5 client) libsmbclient-devel-3.0.33-3.39.el5_8, libsmbclient-devel-3.0.33-3.39.el5_8.i386, samba-3.0.33-3.39.el5_8
- Red Hat Enterprise Linux (v. 5 server) libsmbclient-3.0.33-3.39.el5_8, libsmbclient-3.0.33-3.39.el5_8.i386, libsmbclient-3.0.33-3.39.el5_8.ia64 +21
- Red Hat Enterprise Linux Desktop (v. 5 client) libsmbclient-3.0.33-3.39.el5_8, libsmbclient-3.0.33-3.39.el5_8.i386, samba-3.0.33-3.39.el5_8 +7
- Red Hat Enterprise Linux Desktop (v. 6) libsmbclient-3.5.10-115.el6_2, samba-3.5.10-115.el6_2, samba-client-3.5.10-115.el6_2 +3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libsmbclient-devel-3.5.10-115.el6_2, samba-3.5.10-115.el6_2, samba-doc-3.5.10-115.el6_2 +4
- Red Hat Enterprise Linux EUS (v. 5.6 server) libsmbclient-3.0.33-3.29.el5_6.5, libsmbclient-3.0.33-3.29.el5_6.5.i386, libsmbclient-3.0.33-3.29.el5_6.5.ia64 +21
- Red Hat Enterprise Linux HPC Node (v. 6) samba-3.5.10-115.el6_2, samba-client-3.5.10-115.el6_2, samba-common-3.5.10-115.el6_2 +2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libsmbclient-3.5.10-115.el6_2, libsmbclient-devel-3.5.10-115.el6_2, samba-3.5.10-115.el6_2 +5
- Red Hat Enterprise Linux Long Life (v. 5.3 server) samba-3.0.33-3.7.el5_3.5, samba-3.0.33-3.7.el5_3.5.i386, samba-3.0.33-3.7.el5_3.5.ia64 +9
- Red Hat Enterprise Linux Server (v. 6) libsmbclient-3.5.10-115.el6_2, libsmbclient-3.5.10-115.el6_2.ppc, samba-3.5.10-115.el6_2 +6
- Red Hat Enterprise Linux Server EUS (v. 6.0) libsmbclient-3.5.4-68.el6_0.3, libsmbclient-3.5.4-68.el6_0.3.ppc, samba-3.5.4-68.el6_0.3 +6
- Red Hat Enterprise Linux Server EUS (v. 6.1) libsmbclient-3.5.6-86.el6_1.5, libsmbclient-3.5.6-86.el6_1.5.ppc, samba-3.5.6-86.el6_1.5 +6
- Red Hat Enterprise Linux Server Optional (v. 6) libsmbclient-devel-3.5.10-115.el6_2, libsmbclient-devel-3.5.10-115.el6_2.ppc, samba-3.5.10-115.el6_2 +6
- Red Hat Enterprise Linux Server Optional EUS (v. 6.0) libsmbclient-devel-3.5.4-68.el6_0.3, libsmbclient-devel-3.5.4-68.el6_0.3.ppc, samba-3.5.4-68.el6_0.3 +5
- Red Hat Enterprise Linux Server Optional EUS (v. 6.1) libsmbclient-devel-3.5.6-86.el6_1.5, libsmbclient-devel-3.5.6-86.el6_1.5.ppc, samba-3.5.6-86.el6_1.5 +6
- Red Hat Enterprise Linux Workstation (v. 6) libsmbclient-3.5.10-115.el6_2, samba-3.5.10-115.el6_2, samba-client-3.5.10-115.el6_2 +3
- Red Hat Enterprise Linux Workstation Optional (v. 6) libsmbclient-devel-3.5.10-115.el6_2, samba-3.5.10-115.el6_2, samba-doc-3.5.10-115.el6_2 +4
- RHSA-2012:0466 Released 2012-04-10 · Red Hat rating Criticalsamba3x security update
- RHEL Desktop Workstation (v. 5 client) samba3x-3.5.10-0.108.el5_8, samba3x-winbind-devel-3.5.10-0.108.el5_8, samba3x-winbind-devel-3.5.10-0.108.el5_8.i386
- Red Hat Enterprise Linux (v. 5 server) samba3x-3.5.10-0.108.el5_8, samba3x-3.5.10-0.108.el5_8.i386, samba3x-3.5.10-0.108.el5_8.ia64 +29
- Red Hat Enterprise Linux Desktop (v. 5 client) samba3x-3.5.10-0.108.el5_8, samba3x-3.5.10-0.108.el5_8.i386, samba3x-client-3.5.10-0.108.el5_8 +11
- Red Hat Enterprise Linux EUS (v. 5.6 server) samba3x-3.5.4-0.70.el5_6.2, samba3x-3.5.4-0.70.el5_6.2.i386, samba3x-3.5.4-0.70.el5_6.2.ia64 +29
Vendor assessments
Red Hat
Red Hat rating: Critical. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| RHEL Desktop Workstation (v. 5 client) | Fixed | RHSA-2012:0465, RHSA-2012:0466 |
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2012:0465, RHSA-2012:0466 |
| Red Hat Enterprise Linux AS (v. 4 ELS) | Fixed | RHSA-2012:0478 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2012:0465, RHSA-2012:0466 |
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2012:0465, RHSA-2013:0506, RHSA-2013:0515 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2012:0465, RHSA-2013:0515 |
| Red Hat Enterprise Linux ES (v. 4 ELS) | Fixed | RHSA-2012:0478 |
| Red Hat Enterprise Linux EUS (v. 5.6 server) | Fixed | RHSA-2012:0465, RHSA-2012:0466 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2012:0465, RHSA-2013:0506 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2012:0465 |
| Red Hat Enterprise Linux Long Life (v. 5.3 server) | Fixed | RHSA-2012:0465 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2012:0465, RHSA-2013:0506 |
| Red Hat Enterprise Linux Server EUS (v. 6.0) | Fixed | RHSA-2012:0465 |
| Red Hat Enterprise Linux Server EUS (v. 6.1) | Fixed | RHSA-2012:0465 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2012:0465, RHSA-2013:0515 |
| Red Hat Enterprise Linux Server Optional EUS (v. 6.0) | Fixed | RHSA-2012:0465 |
| Red Hat Enterprise Linux Server Optional EUS (v. 6.1) | Fixed | RHSA-2012:0465 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2012:0465, RHSA-2013:0506, RHSA-2013:0515 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2012:0465, RHSA-2013:0515 |
Timeline
- 2026-10-02 Threatist record created from CVE-2012-1182
- 2026-10-03 Alias added: GHSA-9w2v-pc9r-gpj4
References
Advisory 15
More Samba vulnerabilities
- TI-2020-01431 Netlogon Elevation of Privilege Vulnerability KEVCVSS 3.1CRITICAL 10.0
- TI-2017-05139 Code injection in samba KEVCVSS 3.1CRITICAL 9.8
- TI-2015-00210 The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x… CVSS 2.0HIGH 10.0
- TI-2003-00081 Buffer overflow in the SMB/CIFS packet fragment re-assembly code for SMB daemon (smbd) in… CVSS 2.0HIGH 10.0
- TI-2003-00185 Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before… CVSS 2.0HIGH 10.0
- TI-2007-02362 Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through… CVSS 2.0HIGH 10.0
Sources
- CVE-2012-1182 · CVE Program
- CVE-2012-1182 · NVD
- FIRST EPSS
- GHSA-9w2v-pc9r-gpj4 · GitHub Advisory Database · CC BY 4.0
- CVE-2012-1182 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences