CVE-2012-1182

N/A Unknown
Published: April 10, 2012 Modified: April 29, 2026
View on NVD

Description

The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation, which allows remote attackers to execute arbitrary code via a crafted RPC call.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
Source: secalert@redhat.com
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078258.html
Source: secalert@redhat.com
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078726.html
Source: secalert@redhat.com
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078836.html
Source: secalert@redhat.com
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080567.html
Source: secalert@redhat.com
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00007.html
Source: secalert@redhat.com
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html
Source: secalert@redhat.com
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00009.html
Source: secalert@redhat.com
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html
Source: secalert@redhat.com
http://marc.info/?l=bugtraq&m=133951282306605&w=2
Source: secalert@redhat.com
http://marc.info/?l=bugtraq&m=134323086902585&w=2
Source: secalert@redhat.com
http://secunia.com/advisories/48751
Source: secalert@redhat.com
http://secunia.com/advisories/48754
Source: secalert@redhat.com
http://secunia.com/advisories/48816
Source: secalert@redhat.com
http://secunia.com/advisories/48818
Source: secalert@redhat.com
http://secunia.com/advisories/48844
Source: secalert@redhat.com
http://secunia.com/advisories/48873
Source: secalert@redhat.com
http://secunia.com/advisories/48879
Source: secalert@redhat.com
http://secunia.com/advisories/48999
Source: secalert@redhat.com
http://support.apple.com/kb/HT5281
Source: secalert@redhat.com
http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578
Source: secalert@redhat.com
http://www.debian.org/security/2012/dsa-2450
Source: secalert@redhat.com
http://www.mandriva.com/security/advisories?name=MDVSA-2012:055
Source: secalert@redhat.com
http://www.samba.org/samba/history/samba-3.6.4.html
Source: secalert@redhat.com
http://www.securitytracker.com/id?1026913
Source: secalert@redhat.com
http://www.ubuntu.com/usn/USN-1423-1
Source: secalert@redhat.com
https://www.samba.org/samba/security/CVE-2012-1182
Source: secalert@redhat.com
Vendor Advisory
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078258.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078726.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078836.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080567.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00007.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00009.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=bugtraq&m=133951282306605&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://marc.info/?l=bugtraq&m=134323086902585&w=2
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/48751
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/48754
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/48816
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/48818
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/48844
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/48873
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/48879
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/48999
Source: af854a3a-2127-422b-91ae-364da2661108
http://support.apple.com/kb/HT5281
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.collax.com/produkte/AllinOne-server-for-small-businesses#id2565578
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.debian.org/security/2012/dsa-2450
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.mandriva.com/security/advisories?name=MDVSA-2012:055
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.samba.org/samba/history/samba-3.6.4.html
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1026913
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-1423-1
Source: af854a3a-2127-422b-91ae-364da2661108
https://www.samba.org/samba/security/CVE-2012-1182
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

54 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
74.0%
99th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-189

Affected Vendors

samba

Related CVEs

CVE-2026-9677 N/A
CVE-2026-13245 6.1
CVE-2026-12404 5.3
CVE-2026-10820 N/A
CVE-2026-12415 9.8