Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4436
cve-2012-4436
buffer overflow
fwknop
denial of service
arbitrary code execution
nvd
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execute arbitrary code via many .fwknop.run arguments.
Affected configurations
Node
cipherdynefwknopRange≤2.0.2
ORcipherdynefwknopMatch2.0
ORcipherdynefwknopMatch2.0.1
Related
debiancve
debiancve
CVE-2012-4436
2022-10-03 16:15:34
prion
prion
Buffer overflow
2012-10-22 23:55:00
cvelist
cvelist
CVE-2012-4436
2022-10-03 16:15:34
ubuntucve
ubuntucve
CVE-2012-4436
2012-10-22 00:00:00
nvd
nvd
CVE-2012-4436
2012-10-22 23:55:07
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2012-4436