ubuntu · CVE-2012-0870

Quick triage

Priority: high Published: 2012-02-23 00:00:00 UTC Updated: 2024-07-24 15:57:39 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2012-0870 high priority: Ubuntu including 1 source packages (samba), 6 status rows across 6 suites (hardy, lucid, maverick, natty, oneiric, upstream): not-affected 4, released 2.

Description:

Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.

cvelogic Threat Intelligence