PT-2012-4792 · Gnu · Gnu Gatekeeper

Jan Willamowius · Publicado 2012-08-31 · Atualizado 2024-06-15 · CVE-2012-3534

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions GNU Gatekeeper versions prior to 3.1

Description The issue allows remote attackers to cause a denial of service by consuming connections and threads via a large number of connections to the status port, due to the lack of connection limits.

Recommendations For GNU Gatekeeper versions prior to 3.1, consider limiting connections to the status port as a temporary workaround until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-3534

OPENSUSE-SU-2024:10142-1

Produtos afetados

Gnu Gatekeeper

Referências · 12

• http://secunia.com/advisories/50343 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/08/25/3 · Nota
• http://lists.opensuse.org/opensuse-updates/2016-07/msg00070.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-3534 · Nota
• http://openwall.com/lists/oss-security/2012/08/25/4 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10142-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77975 · Nota
• http://osvdb.org/84862 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-3534 · Nota de Segurança
• http://gnugk.org/gnugk-3.1.html · Aviso do Fabricante
• http://securityfocus.com/bid/55198 · Nota
• http://openwall.com/lists/oss-security/2012/08/27/1 · Nota