Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-6128
HistoryFeb 24, 2013 - 7:55 p.m.

CVE-2012-6128

2013-02-2419:55:01
CWE-119
[email protected]
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

JSON

Multiple stack-based buffer overflows in http.c in OpenConnect before 4.08 allow remote VPN gateways to cause a denial of service (application crash) via a long (1) hostname, (2) path, or (3) cookie list in a response.

Affected configurations

NVD
Node
infradeadopenconnectRange≤4.07
OR
infradeadopenconnectMatch1.00
OR
infradeadopenconnectMatch1.10
OR
infradeadopenconnectMatch1.20
OR
infradeadopenconnectMatch1.30
OR
infradeadopenconnectMatch1.40
OR
infradeadopenconnectMatch2.00
OR
infradeadopenconnectMatch2.01
OR
infradeadopenconnectMatch2.10
OR
infradeadopenconnectMatch2.11
OR
infradeadopenconnectMatch2.12
OR
infradeadopenconnectMatch2.20
OR
infradeadopenconnectMatch2.21
OR
infradeadopenconnectMatch2.22
OR
infradeadopenconnectMatch2.23
OR
infradeadopenconnectMatch2.24
OR
infradeadopenconnectMatch2.25
OR
infradeadopenconnectMatch2.26
OR
infradeadopenconnectMatch3.00
OR
infradeadopenconnectMatch3.01
OR
infradeadopenconnectMatch3.02
OR
infradeadopenconnectMatch3.11
OR
infradeadopenconnectMatch3.12
OR
infradeadopenconnectMatch3.13
OR
infradeadopenconnectMatch3.14
OR
infradeadopenconnectMatch3.15
OR
infradeadopenconnectMatch3.16
OR
infradeadopenconnectMatch3.17
OR
infradeadopenconnectMatch3.18
OR
infradeadopenconnectMatch3.19
OR
infradeadopenconnectMatch3.20
OR
infradeadopenconnectMatch3.99
OR
infradeadopenconnectMatch4.00
OR
infradeadopenconnectMatch4.01
OR
infradeadopenconnectMatch4.02
OR
infradeadopenconnectMatch4.03
OR
infradeadopenconnectMatch4.04
OR
infradeadopenconnectMatch4.05
OR
infradeadopenconnectMatch4.06

Related

securityvulns 2
cve 1
nessus 6
openvas 7
fedora 2
debiancve 1
prion 1
cvelist 1
gentoo 1
debian 1
ubuntucve 1
securityvulns
securityvulns
[SECURITY] [DSA 2623-1] openconnect security update
2013-02-18 00:00:00
OpenConnect buffer overflow
2013-02-18 00:00:00
cve
cve
CVE-2012-6128
2013-02-24 19:55:01
nessus
nessus
Mandriva Linux Security Advisory : openconnect (MDVSA-2013:108)
2013-04-20 00:00:00
openSUSE Security Update : openconnect (openSUSE-SU-2013:0979-1)
2014-06-13 00:00:00
Fedora 17 : openconnect-4.08-1.fc17 (2013-2472)
2013-02-25 00:00:00
openvas
openvas
Fedora Update for openconnect FEDORA-2013-2498
2013-03-01 00:00:00
Fedora Update for openconnect FEDORA-2013-2472
2013-03-01 00:00:00
Fedora Update for openconnect FEDORA-2013-2498
2013-03-01 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: openconnect-4.08-1.fc17
2013-02-24 08:46:36
[SECURITY] Fedora 18 Update: openconnect-4.08-1.fc18
2013-02-24 08:58:22
debiancve
debiancve
CVE-2012-6128
2013-02-24 19:55:01
prion
prion
Stack overflow
2013-02-24 19:55:00
cvelist
cvelist
CVE-2012-6128
2013-02-24 19:00:00
gentoo
gentoo
OpenConnect: User-assisted execution of arbitrary code
2014-05-18 00:00:00
debian
debian
[SECURITY] [DSA 2623-1] openconnect security update
2013-02-14 17:19:57
ubuntucve
ubuntucve
CVE-2012-6128
2013-02-24 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.0%

JSON
Related for NVD:CVE-2012-6128
securityvulns2cve1nessus6openvas7fedora2debiancve1prion1cvelist1gentoo1debian1ubuntucve1