CVE-2012-0870
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service...
CVE-2012-0870 is a high vulnerability (CVSS 7.9) in Rim Blackberry Playbook Tablet, published February 23, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.42%, the 93rd percentile. Fixed in samba 2:3.4.0~pre1-1.
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
Exploit likelihood
What each source reports
NVD Score used
7.9
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
- Record
CVE-2012-0870- CVSS 2.0
- 7.9 High
AV:A/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
- Record
CVE-2012-0870- Updated
- 2026-11-02
EUVDEUVD-2012-0895 No score
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
- Record
EUVD-2012-0895- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h6wh-2qjc-xjwm No score
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service...
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
- Record
GHSA-h6wh-2qjc-xjwm- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
- Record
CVE-2012-0870- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0870 No score
Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
- Record
DEBIAN-CVE-2012-0870- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10069-1 No score
ctdb-4.5.0-1.1 on GA media
These are all security issues fixed in the ctdb-4.5.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10069-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sambaDebian:12 |
before 2:3.4.0~pre1-1 | 2:3.4.0~pre1-1 |
sambaDebian:13 |
before 2:3.4.0~pre1-1 | 2:3.4.0~pre1-1 |
sambaDebian:14 |
before 2:3.4.0~pre1-1 | 2:3.4.0~pre1-1 |
sambaRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-clientRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-commonRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-swatRed Hat:enterprise_linux:4::as |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
sambaRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-clientRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
Show 42 moreShow less
| Package | Affected | Fixed |
|---|---|---|
samba-commonRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-swatRed Hat:enterprise_linux:4::desktop |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
sambaRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-clientRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-commonRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-swatRed Hat:enterprise_linux:4::es |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
sambaRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-clientRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-commonRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-debuginfoRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
samba-swatRed Hat:enterprise_linux:4::ws |
before 0:3.0.33-0.35.el4 | 0:3.0.33-0.35.el4 |
libsmbclientRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
sambaRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
samba-clientRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
samba-commonRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
samba-debuginfoRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
samba-swatRed Hat:enterprise_linux:5::client |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
libsmbclient-develRed Hat:enterprise_linux:5::client_workstation |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
sambaRed Hat:enterprise_linux:5::client_workstation |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
samba-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
sambaRed Hat:rhel_mission_critical:5.3 |
before 0:3.0.33-3.7.el5_3.4 | 0:3.0.33-3.7.el5_3.4 |
samba-clientRed Hat:rhel_mission_critical:5.3 |
before 0:3.0.33-3.7.el5_3.4 | 0:3.0.33-3.7.el5_3.4 |
samba-commonRed Hat:rhel_mission_critical:5.3 |
before 0:3.0.33-3.7.el5_3.4 | 0:3.0.33-3.7.el5_3.4 |
samba-debuginfoRed Hat:rhel_mission_critical:5.3 |
before 0:3.0.33-3.7.el5_3.4 | 0:3.0.33-3.7.el5_3.4 |
samba-swatRed Hat:rhel_mission_critical:5.3 |
before 0:3.0.33-3.7.el5_3.4 | 0:3.0.33-3.7.el5_3.4 |
libsmbclientRed Hat:rhel_eus:5.6 |
before 0:3.0.33-3.29.el5_6.4 | 0:3.0.33-3.29.el5_6.4 |
libsmbclient-develRed Hat:rhel_eus:5.6 |
before 0:3.0.33-3.29.el5_6.4 | 0:3.0.33-3.29.el5_6.4 |
sambaRed Hat:rhel_eus:5.6 |
before 0:3.0.33-3.29.el5_6.4 | 0:3.0.33-3.29.el5_6.4 |
samba-clientRed Hat:rhel_eus:5.6 |
before 0:3.0.33-3.29.el5_6.4 | 0:3.0.33-3.29.el5_6.4 |
samba-commonRed Hat:rhel_eus:5.6 |
before 0:3.0.33-3.29.el5_6.4 | 0:3.0.33-3.29.el5_6.4 |
samba-debuginfoRed Hat:rhel_eus:5.6 |
before 0:3.0.33-3.29.el5_6.4 | 0:3.0.33-3.29.el5_6.4 |
samba-swatRed Hat:rhel_eus:5.6 |
before 0:3.0.33-3.29.el5_6.4 | 0:3.0.33-3.29.el5_6.4 |
libsmbclientRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
libsmbclient-develRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
sambaRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
samba-clientRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
samba-commonRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
samba-debuginfoRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
samba-swatRed Hat:enterprise_linux:5::server |
before 0:3.0.33-3.38.el5_8 | 0:3.0.33-3.38.el5_8 |
sambaopenSUSE:Tumbleweed |
before 4.5.0-1.1 | 4.5.0-1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565
lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html
ubuntu.com/usn/USN-1374-1
lists.opensuse.org/opensuse-security-announce/2012-04/msg00014.html
lists.opensuse.org/opensuse-security-announce/2012-04/msg00008.html
secunia.com/advisories/48844
Show 73 moreShow less
secunia.com/advisories/48116
bugzilla.redhat.com/show_bug.cgi?id=795509
secunia.com/advisories/48879
secunia.com/advisories/48186
lists.opensuse.org/opensuse-security-announce/2012-03/msg00009.html
support.apple.com/kb/HT5281
lists.apple.com/archives/security-announce/2012/May/msg00001.html
exchange.xforce.ibmcloud.com/vulnerabilities/73361
nvd.nist.gov/vuln/detail/CVE-2012-0870
access.redhat.com/errata/RHSA-2012:0332
access.redhat.com/security/cve/CVE-2012-0870
samba.org/samba/security/CVE-2012-0870
github.com/advisories/GHSA-h6wh-2qjc-xjwm
security-tracker.debian.org/tracker/CVE-2012-0870
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0332.json
cve.org/CVERecord?id=CVE-2012-0870
suse.com/security/cve/CVE-2009-1886
suse.com/security/cve/CVE-2009-1888
suse.com/security/cve/CVE-2009-2813
suse.com/security/cve/CVE-2009-2906
suse.com/security/cve/CVE-2009-2948
suse.com/security/cve/CVE-2010-0547
suse.com/security/cve/CVE-2010-0728
suse.com/security/cve/CVE-2010-0787
suse.com/security/cve/CVE-2010-0926
suse.com/security/cve/CVE-2010-1635
suse.com/security/cve/CVE-2010-1642
suse.com/security/cve/CVE-2010-2063
suse.com/security/cve/CVE-2010-3069
suse.com/security/cve/CVE-2011-0719
suse.com/security/cve/CVE-2011-2522
suse.com/security/cve/CVE-2011-2694
suse.com/security/cve/CVE-2012-0817
suse.com/security/cve/CVE-2012-0870
suse.com/security/cve/CVE-2012-1182
suse.com/security/cve/CVE-2012-2111
suse.com/security/cve/CVE-2012-6150
suse.com/security/cve/CVE-2013-0172
suse.com/security/cve/CVE-2013-0213
suse.com/security/cve/CVE-2013-0214
suse.com/security/cve/CVE-2013-0454
suse.com/security/cve/CVE-2013-1863
suse.com/security/cve/CVE-2013-4124
suse.com/security/cve/CVE-2013-4408
suse.com/security/cve/CVE-2013-4475
suse.com/security/cve/CVE-2013-4476
suse.com/security/cve/CVE-2013-4496
suse.com/security/cve/CVE-2013-6442
suse.com/security/cve/CVE-2014-0178
suse.com/security/cve/CVE-2014-0239
suse.com/security/cve/CVE-2014-0244
suse.com/security/cve/CVE-2014-3493
suse.com/security/cve/CVE-2014-3560
suse.com/security/cve/CVE-2014-8143
suse.com/security/cve/CVE-2015-0240
suse.com/security/cve/CVE-2015-3223
suse.com/security/cve/CVE-2015-5252
suse.com/security/cve/CVE-2015-5296
suse.com/security/cve/CVE-2015-5299
suse.com/security/cve/CVE-2015-5330
suse.com/security/cve/CVE-2015-5370
suse.com/security/cve/CVE-2015-7560
suse.com/security/cve/CVE-2015-8467
suse.com/security/cve/CVE-2015-8543
suse.com/security/cve/CVE-2016-0771
suse.com/security/cve/CVE-2016-2110
suse.com/security/cve/CVE-2016-2111
suse.com/security/cve/CVE-2016-2112
suse.com/security/cve/CVE-2016-2113
suse.com/security/cve/CVE-2016-2115
suse.com/security/cve/CVE-2016-2118
suse.com/security/cve/CVE-2016-2119