PT-2012-4792 · Gnu · Gnu Gatekeeper

Jan Willamowius · Published 2012-08-31 · Updated 2024-06-15 · CVE-2012-3534

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions GNU Gatekeeper versions prior to 3.1

Description The issue allows remote attackers to cause a denial of service by consuming connections and threads via a large number of connections to the status port, due to the lack of connection limits.

Recommendations For GNU Gatekeeper versions prior to 3.1, consider limiting connections to the status port as a temporary workaround until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2012-3534

OPENSUSE-SU-2024:10142-1

Affected Products

Gnu Gatekeeper

References · 12

• http://secunia.com/advisories/50343 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2016-07/msg00070.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10142-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3534 · Security Note
• http://gnugk.org/gnugk-3.1.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2012/08/25/3 · Note
• https://suse.com/security/cve/CVE-2012-3534 · Note
• http://openwall.com/lists/oss-security/2012/08/25/4 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77975 · Note
• http://osvdb.org/84862 · Note
• http://securityfocus.com/bid/55198 · Note
• http://openwall.com/lists/oss-security/2012/08/27/1 · Note