Evil-DB LogoEvil-DB
← All CVEs

CVE-2012-1182

high · 10

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

10
CVSS
74.4%
EPSS (exploit prob.)
99th
EPSS percentile
2012-04-10
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-189

Affected products

VendorProductAffected versions
sambasamba<= 3.4.15
sambasamba3.0.0
sambasamba3.0.1
sambasamba3.0.2
sambasamba3.0.2
sambasamba3.0.2a
sambasamba3.0.3
sambasamba3.0.4
sambasamba3.0.4
sambasamba3.0.5
sambasamba3.0.6
sambasamba3.0.7
sambasamba3.0.8
sambasamba3.0.9
sambasamba3.0.10
sambasamba3.0.11
sambasamba3.0.12
sambasamba3.0.13
sambasamba3.0.14
sambasamba3.0.14
sambasamba3.0.14a
sambasamba3.0.15
sambasamba3.0.16
sambasamba3.0.17
sambasamba3.0.18
sambasamba3.0.19
sambasamba3.0.20
sambasamba3.0.20
sambasamba3.0.20
sambasamba3.0.20a
sambasamba3.0.20b
sambasamba3.0.21
sambasamba3.0.21
sambasamba3.0.21
sambasamba3.0.21
sambasamba3.0.21a
sambasamba3.0.21b
sambasamba3.0.21c
sambasamba3.0.22
sambasamba3.0.23

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-1182