Lucene search

K
nvd[email protected]NVD:CVE-2012-4436
HistoryOct 22, 2012 - 11:55 p.m.

CVE-2012-4436

2012-10-2223:55:07
CWE-119
web.nvd.nist.gov

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execute arbitrary code via many .fwknop.run arguments.

Affected configurations

NVD
Node
cipherdynefwknopRange2.0.2
OR
cipherdynefwknopMatch2.0
OR
cipherdynefwknopMatch2.0.1

4.4 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2012-4436