Lucene search

K
suseSuseSUSE-SU-2012:0337-1
HistoryMar 08, 2012 - 7:08 p.m.

Security update for Samba (critical)

2012-03-0819:08:17
lists.opensuse.org
9

0.959 High

EPSS

Percentile

99.3%

This update of Samba fixes a heap-based buffer overflow
that could be exploited by remote, unauthenticated
attackers to crash the smbd daemon or potentially execute
arbitrary code via specially crafted SMB AndX request
packets (CVE-2012-0870).

Also fixed two non security bugs:

  • Fix to handle domain join using NetBIOS name; (bnc
    #633729).
  • Fixed the DFS referral response for msdfs root;
    (bnc#703655).