Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-4436
HistoryOct 22, 2012 - 12:00 a.m.

CVE-2012-4436

2012-10-2200:00:00
ubuntu.com
ubuntu.com
12

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

Buffer overflow in the run_last_args function in client/fwknop.c in fwknop
before 2.0.3, when processing --last, might allow local users to cause a
denial of service (client crash) and possibly execute arbitrary code via
many .fwknop.run arguments.

Bugs

CVSS2

4.4

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

0

Percentile

5.1%

Related for UB:CVE-2012-4436