CVE-2012-3534

Опубликовано: 31 авг. 2012

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections.

Ссылки

http://lists.opensuse.org/opensuse-updates/2016-07/msg00070.html
Third Party Advisory
http://secunia.com/advisories/50343
Permissions Required
Vendor Advisory
http://www.gnugk.org/gnugk-3.1.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/08/25/3
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/08/25/4
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/08/27/1
Third Party Advisory
http://www.osvdb.org/84862
Broken Link
http://www.securityfocus.com/bid/55198
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/77975
http://lists.opensuse.org/opensuse-updates/2016-07/msg00070.html
Third Party Advisory
http://secunia.com/advisories/50343
Permissions Required
Vendor Advisory
http://www.gnugk.org/gnugk-3.1.html
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/08/25/3
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/08/25/4
Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/08/27/1
Third Party Advisory
http://www.osvdb.org/84862
Broken Link
http://www.securityfocus.com/bid/55198
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/77975

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:gnugk:gnu_gatekeeper:*:beta:*:*:*:*:*:*

Версия до 3.1 (включая)

cpe:2.3:a:gnugk:gnu_gatekeeper:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.0.8:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.0.9:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.7:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.2.9:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:2.3.5:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:3.0:*:*:*:*:*:*:*

cpe:2.3:a:gnugk:gnu_gatekeeper:3.0:beta:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01691

Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2012-3534

ubuntu

больше 13 лет назад

CVE-2012-3534

debian

больше 13 лет назад

GNU Gatekeeper before 3.1 does not limit the number of connections to ...

openSUSE-SU-2016:1856-1

suse-cvrf

больше 9 лет назад

Security update for gnugk

GHSA-449j-8m8x-cp6f

github

больше 3 лет назад

EPSS

Процентиль: 82%

0.01691

Низкий

5 Medium

CVSS2

Дефекты

CWE-119