Ubuntu.comUB:CVE-2012-3291

HistoryJun 07, 2012 - 12:00 a.m.

CVE-2012-3291

2012-06-0700:00:00

ubuntu.com

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.006

Percentile

78.5%

JSON

Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to
cause a denial of service via a crafted greeting banner.

Bugs

<https://bugs.launchpad.net/bugs/1013946>

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchopenconnect< 2.25-0.1+squeeze1build0.11.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.04	noarch	openconnect	< 2.25-0.1+squeeze1build0.11.04.1	UNKNOWN

References

git.infradead.org/users/dwmw2/openconnect.git/commitdiff/14cae65318d3ef1f7d449e463b72b6934e82f1c2

lists.fedoraproject.org/pipermail/package-announce/2012-May/079747.html

www.infradead.org/openconnect/changelog.html

launchpad.net/bugs/cve/CVE-2012-3291

nvd.nist.gov/vuln/detail/CVE-2012-3291

security-tracker.debian.org/tracker/CVE-2012-3291

www.cve.org/CVERecord?id=CVE-2012-3291

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.006

Percentile

78.5%

JSON

Related for UB:CVE-2012-3291