Lucene search

K
nvd[email protected]NVD:CVE-2012-3421
HistoryAug 27, 2012 - 11:55 p.m.

CVE-2012-3421

2012-08-2723:55:02
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.8%

The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an “event-driven programming flaw.”

Affected configurations

NVD
Node
sgiperformance_co-pilotRange3.6.4
OR
sgiperformance_co-pilotMatch2.1.1
OR
sgiperformance_co-pilotMatch2.1.2
OR
sgiperformance_co-pilotMatch2.1.3
OR
sgiperformance_co-pilotMatch2.1.4
OR
sgiperformance_co-pilotMatch2.1.5
OR
sgiperformance_co-pilotMatch2.1.6
OR
sgiperformance_co-pilotMatch2.1.7
OR
sgiperformance_co-pilotMatch2.1.8
OR
sgiperformance_co-pilotMatch2.1.9
OR
sgiperformance_co-pilotMatch2.1.10
OR
sgiperformance_co-pilotMatch2.1.11
OR
sgiperformance_co-pilotMatch2.2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.2 Medium

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.8%