Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2012:0501-2 Critical: Samba Remote Code Execution Fix

suse
Calendar Grey April 14, 2012
Dist Suse Esm H88
SUSE Security Patch for OpenSSH: Remediates serious remote exploit vulnerability in urgent advisory SUSE-SU-2012:0550-3.
An update that fixes one vulnerability is now available

Summary

A remote code execution flaw in Samba has been fixed: * CVE-2012-1182: PIDL based autogenerated code uses client supplied size values which allows attackers to write beyond the allocated array size Security Issue reference: * CVE-2012-1182 Package List: - SUSE CORE 9 (i586 s390 s390x x86_64): libsmbclient-3.0.26a-0.23 libsmbclient-devel-3.0.26a-0.23 samba-3.0.26a-0.23 samba-client-3.0.26a-0.23 samba-doc-3.0.26a-0.23 samba-pdb-3.0.26a-0.23 samba-python-3.0.26a-0.23 samba-vscan-0.3.6b-0.51 samba-winbind-3.0.26a-0.23 - SUSE CORE 9 (x86_64): libsmbclient-32bit-9-201204111235 samba-32bit-9-201204111235 samba-client-32bit-9-201204111235 samba-winbind-32bit-9-201204111235 - SUSE CORE 9 (s390x):

Topics%20covered

Topics Covered

security advisory critical remote code execution SUSE Samba

References

#752797

Cross- CVE-2012-1182

Affected Products:

SUSE CORE 9

https://www.suse.com/security/cve/CVE-2012-1182.html

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2012:0501-2
Rating: critical

Topics%20covered

Topics Covered

security advisory critical remote code execution SUSE Samba

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here