CVE-2012-0804

2012-05-2920:55:00

Alpine Linux Development Team

security.alpinelinux.org

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.7%

JSON

Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchcvs< 1.12.12-r0UNKNOWN
Alpine3.10-mainnoarchcvs< 1.12.12-r0UNKNOWN
Alpine3.11-mainnoarchcvs< 1.12.12-r0UNKNOWN
Alpine3.12-mainnoarchcvs< 1.12.12-r0UNKNOWN
Alpine3.13-mainnoarchcvs< 1.12.12-r0UNKNOWN
Alpine3.14-mainnoarchcvs< 1.12.12-r0UNKNOWN
Alpine3.15-mainnoarchcvs< 1.12.12-r0UNKNOWN
Alpine3.16-mainnoarchcvs< 1.12.12-r0UNKNOWN
Alpine3.17-mainnoarchcvs< 1.12.12-r0UNKNOWN
Alpine3.18-communitynoarchcvs< 1.12.12-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	cvs	< 1.12.12-r0	UNKNOWN
Alpine	3.10-main	noarch	cvs	< 1.12.12-r0	UNKNOWN
Alpine	3.11-main	noarch	cvs	< 1.12.12-r0	UNKNOWN
Alpine	3.12-main	noarch	cvs	< 1.12.12-r0	UNKNOWN
Alpine	3.13-main	noarch	cvs	< 1.12.12-r0	UNKNOWN
Alpine	3.14-main	noarch	cvs	< 1.12.12-r0	UNKNOWN
Alpine	3.15-main	noarch	cvs	< 1.12.12-r0	UNKNOWN
Alpine	3.16-main	noarch	cvs	< 1.12.12-r0	UNKNOWN
Alpine	3.17-main	noarch	cvs	< 1.12.12-r0	UNKNOWN
Alpine	3.18-community	noarch	cvs	< 1.12.12-r0	UNKNOWN