Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-6128

Опубликовано: 24 фев. 2013
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:infradead:openconnect:*:*:*:*:*:*:*:*
Версия до 4.07 (включая)
cpe:2.3:a:infradead:openconnect:1.00:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:1.10:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:1.20:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:1.30:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:1.40:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.00:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.01:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.10:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.11:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.12:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.20:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.21:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.22:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.23:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.24:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.25:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:2.26:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.00:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.01:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.02:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.11:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.12:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.13:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.14:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.15:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.16:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.17:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.18:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.19:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.20:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:3.99:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:4.00:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:4.01:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:4.02:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:4.03:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:4.04:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:4.05:*:*:*:*:*:*:*
cpe:2.3:a:infradead:openconnect:4.06:*:*:*:*:*:*:*

EPSS

Процентиль: 76%
0.00971
Низкий

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

ubuntu
почти 13 лет назад

Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.

debian
почти 13 лет назад

Multiple stack-based buffer overflows in http.c in OpenConnect before ...

github
больше 3 лет назад

Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.

fstec
больше 11 лет назад

Уязвимость операционной системы Gentoo Linux, позволяющая удаленному злоумышленнику нарушить доступность защищаемой информации

EPSS

Процентиль: 76%
0.00971
Низкий

5 Medium

CVSS2

Дефекты

CWE-119