PT-2012-4181 · Cumin · Cumin

Published 2012-09-28 · Updated 2021-07-15 · CVE-2012-2685

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cumin versions prior to 0.1.5444

Description The issue allows remote authenticated users to cause a denial of service, specifically memory consumption, by sending an image request with a large size.

Recommendations For versions prior to 0.1.5444, update to version 0.1.5444 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2012-2685

RHSA-2012:1278

RHSA-2012:1281

Affected Products

Cumin

References · 7

• 🔥 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=830248 · Exploit
• http://rhn.redhat.com/errata/RHSA-2012-1278.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1281.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2685 · Security Note
• http://secunia.com/advisories/50660 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78774 · Note
• http://securityfocus.com/bid/55618 · Note