Lucene search

[email protected]CVE-2012-4435

HistoryOct 22, 2012 - 11:55 p.m.

CVE-2012-4435

2012-10-2223:55:07

CWE-20

[email protected]

web.nvd.nist.gov

fwknop

denial of service

cve-2012-4435

nvd

security vulnerability

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.117 Low

EPSS

Percentile

95.3%

JSON

fwknop before 2.0.3 does not properly validate IP addresses, which allows remote authenticated users to cause a denial of service (server crash) via a long IP address.

Affected configurations

NVD

Node

cipherdynefwknopRange≤2.0.2

cipherdynefwknopMatch2.0

cipherdynefwknopMatch2.0.1

CPENameOperatorVersion
cipherdyne:fwknopcipherdyne fwknople2.0.2
cipherdyne:fwknopcipherdyne fwknopeq2.0
cipherdyne:fwknopcipherdyne fwknopeq2.0.1

CPE	Name	Operator	Version
cipherdyne:fwknop	cipherdyne fwknop	le	2.0.2
cipherdyne:fwknop	cipherdyne fwknop	eq	2.0
cipherdyne:fwknop	cipherdyne fwknop	eq	2.0.1

References

www.cipherdyne.org/blog/2012/09/software-release-fwknop-2.0.3.html

www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git%3Ba=commitdiff%3Bh=263fa01f2af1d336961df320f1c7a9ea84ddac9a

www.cipherdyne.org/cgi-bin/gitweb.cgi?p=fwknop.git%3Ba=commitdiff%3Bh=f4c16bc47fc24a96b63105556b62d61c1ba7d799

www.openwall.com/lists/oss-security/2012/09/19/2

www.openwall.com/lists/oss-security/2012/09/20/2

www.openwall.com/lists/oss-security/2012/09/20/4

exchange.xforce.ibmcloud.com/vulnerabilities/79568

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

6.4 Medium

AI Score

Confidence

Low

0.117 Low

EPSS

Percentile

95.3%

JSON

Related for CVE-2012-4435

cvelist1 debiancve1 ubuntucve1 prion1 nvd1