Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-3404 State: PUBLISHED Published: 2014-02-10T17:00:00 Last Updated: 2024-08-06T20:05:12.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.12 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (stack corruption and crash) via a format string that uses positional parameters and many format specifiers. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1200.html - https://sourcewar
alyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1200.html - https://sourceware.org/bugzilla/show_bug.cgi?id=12445 - https://bugzilla.redhat.com/show_bug.cgi?id=833703 - https://security.gentoo.org/glsa/201503-04 - http://rhn.redhat.com/errata/RHSA-2012-1098.html - http://www.ubuntu.com/usn/USN-1589-1 - http://www.openwall.com/lists/oss-security/2012/07/11/17
CVE ID: CVE-2012-3405 State: PUBLISHED Published: 2014-02-10T17:00:00 Last Updated: 2024-08-06T20:05:12.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vfprintf function in stdio-common/vfprintf.c in libc in GNU C Library (aka glibc) 2.14 and other versions does not properly calculate a buffer length, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (segmentation fault and crash) via a format string with a large number of format specifiers that triggers "desynchronization within the buffer size handling," a different vulnerability than CVE-2012-3404. Additional Analyst Notes: - CVE Progr
on within the buffer size handling," a different vulnerability than CVE-2012-3404. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1200.html - https://bugzilla.redhat.com/show_bug.cgi?id=833704 - https://sourceware.org/bugzilla/show_bug.cgi?id=13446 - https://security.gentoo.org/glsa/201503-04 - http://rhn.redhat.com/errata/RHSA-2012-1098.html - http://www.ubuntu.com/usn/USN-1589-1 - http://www.openwall.com/lists/oss-security/2012/07/11/17
CVE ID: CVE-2012-3406 State: PUBLISHED Published: 2014-02-10T17:00:00 Last Updated: 2024-08-06T20:05:12.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vfprintf function in stdio-common/vfprintf.c in GNU C Library (aka glibc) 2.5, 2.12, and probably other versions does not "properly restrict the use of" the alloca function when allocating the SPECS array, which allows context-dependent attackers to bypass the FORTIFY_SOURCE format-string protection mechanism and cause a denial of service (crash) or possibly execute arbitrary code via a crafted format string using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 an
ing using positional parameters and a large number of format specifiers, a different vulnerability than CVE-2012-3404 and CVE-2012-3405. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2012-1200.html - https://bugzilla.redhat.com/show_bug.cgi?id=826943 - http://rhn.redhat.com/errata/RHSA-2012-1097.html - https://security.gentoo.org/glsa/201503-04 - http://rhn.redhat.com/errata/RHSA-2012-1098.html - http://www.ubuntu.com/usn/USN-1589-1 - http://rhn.redhat.com/errata/RHSA-2012-1185.html - http://www.openwall.com/lists/oss-security/2012/07/11/17 - https://bugzilla.redhat.com/attachment.cgi?id=594722
CVE ID: CVE-2012-3407 State: PUBLISHED Published: 2019-11-22T14:32:57 Last Updated: 2024-08-06T20:05:12.326Z Vendors: plow Products: plow Problem Types: UNKNOWN_TYPE Description: plow has local buffer overflow vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-3407 - https://access.redhat.com/security/cve/cve-2012-3407 - http://www.openwall.com/lists/oss-security/2012/07/11/16
CVE ID: CVE-2012-3408 State: PUBLISHED Published: 2012-08-06T16:00:00Z Last Updated: 2024-08-06T20:05:12.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/puppet/network/authstore.rb in Puppet before 2.7.18, and Puppet Enterprise before 2.5.2, supports use of IP addresses in certnames without warning of potential risks, which might allow remote attackers to spoof an agent by acquiring a previously used IP address. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=839166 - http://puppetlabs.com/security/cve/cve-2012-3408/ - https://github.com/puppetlabs/puppet/commit/ab9150baa1b738467a33b01df1d90e076253fbbd
CVE ID: CVE-2012-3409 State: PUBLISHED Published: 2019-12-20T13:33:05 Last Updated: 2024-08-06T20:05:12.386Z Vendors: ecryptfs-utils Products: ecryptfs-utils Problem Types: suid helper does not restrict mounting filesystems with nosuid,nodev leading to possible privilege escalation Description: ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2012-3409 - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3409 - http://www.openwall.com/lists/oss-security/2012/07/12/1 - http://www.openwall.com/lists/
show_bug.cgi?id=CVE-2012-3409 - http://www.openwall.com/lists/oss-security/2012/07/12/1 - http://www.openwall.com/lists/oss-security/2012/07/11/23 - http://www.openwall.com/lists/oss-security/2012/07/13/5 - https://access.redhat.com/security/cve/cve-2012-3409
CVE ID: CVE-2012-3410 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-06T20:05:12.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in lib/sh/eaccess.c in GNU Bash before 4.2 patch 33 might allow local users to bypass intended restricted shell access via a long filename in /dev/fd, which is not properly handled when expanding the /dev/fd prefix. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2012/07/11/22 - http://www.mandriva.com/security/advisories?name=MDVSA-2012:128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77551 - https://hermes.opensuse.org/messages/
name=MDVSA-2012:128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/77551 - https://hermes.opensuse.org/messages/15227834 - http://secunia.com/advisories/51086 - http://www.openwall.com/lists/oss-security/2012/07/11/11 - http://www.securityfocus.com/bid/54937 - http://security.gentoo.org/glsa/glsa-201210-05.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681278 - ftp://ftp.gnu.org/pub/gnu/bash/bash-4.2-patches/bash42-033 - http://www.openwall.com/lists/oss-security/2012/07/12/4
CVE ID: CVE-2012-3411 State: PUBLISHED Published: 2013-03-04T21:00:00 Last Updated: 2024-08-06T20:05:12.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq before 2.63test1, when used with certain libvirt configurations, replies to requests from prohibited interfaces, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed DNS query. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDVSA-2013:072 - http://rhn.redhat.com/errata/RHSA-2013-0276.html - http://www.openwall.com/lists/oss-security/2012/07/12/5 - http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commitdiff%3
ttp://www.openwall.com/lists/oss-security/2012/07/12/5 - http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commitdiff%3Bh=2f38141f434e23292f84cefc33e8de76fb856147 - https://bugzilla.redhat.com/show_bug.cgi?id=833033 - http://rhn.redhat.com/errata/RHSA-2013-0579.html - http://www.thekelleys.org.uk/dnsmasq/CHANGELOG - http://www.securityfocus.com/bid/54353 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683372 - http://rhn.redhat.com/errata/RHSA-2013-0277.html - http://thekelleys.org.uk/gitweb/?p=dnsmasq.git%3Ba=commitdiff%3Bh=54dd393f3938fc0c19088fbd319b95e37d81a2b0
CVE ID: CVE-2012-3412 State: PUBLISHED Published: 2012-10-03T10:00:00 Last Updated: 2024-08-06T20:05:12.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sfc (aka Solarflare Solarstorm) driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service (DMA descriptor consumption and network-controller outage) via crafted TCP packets that trigger a small MSS value. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/USN-1572-1 - http://www.ubuntu.com/usn/USN-1579-1 - http://www.ubuntu.com/usn/USN-1578-1 - http://secunia.com/advisories/50732 - http://secunia.com/advisories/50811 - https://github.com/torvalds/l
n/USN-1578-1 - http://secunia.com/advisories/50732 - http://secunia.com/advisories/50811 - https://github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c - http://rhn.redhat.com/errata/RHSA-2012-1401.html - http://www.ubuntu.com/usn/USN-1567-1 - http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html - http://rhn.redhat.com/errata/RHSA-2012-1323.html - https://bugzilla.redhat.com/show_bug.cgi?id=844714 - http://rhn.redhat.com/errata/RHSA-2012-1324.html - http://www.ubuntu.com/usn/USN-1577-1 - https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html - http://www.ubuntu.com/usn/USN-1568-1 - http://www.ubuntu.com/usn/USN-1575-1 - http:/
ment/2012/suse-su-20121679-1.html - http://www.ubuntu.com/usn/USN-1568-1 - http://www.ubuntu.com/usn/USN-1575-1 - http://rhn.redhat.com/errata/RHSA-2012-1347.html - http://secunia.com/advisories/51193 - http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30 - http://rhn.redhat.com/errata/RHSA-2012-1430.html - http://rhn.redhat.com/errata/RHSA-2012-1375.html - http://www.openwall.com/lists/oss-security/2012/08/03/4 - http://secunia.com/advisories/50633 - http://www.ubuntu.com/usn/USN-1580-1
CVE ID: CVE-2012-3413 State: PUBLISHED Published: 2012-08-07T20:00:00Z Last Updated: 2024-08-06T20:05:12.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email. Additional Analyst Notes: - CVE Program Container: References: - http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083946.html - https://projects.kde.org/projects/kde/kdepim/repository/revisions/dbb2f72f4745e00f53031965a9c10b2d6862bd54 - http://www.openwall.com/lists/oss
rg/projects/kde/kdepim/repository/revisions/dbb2f72f4745e00f53031965a9c10b2d6862bd54 - http://www.openwall.com/lists/oss-security/2012/07/16/3 - http://ubuntu.com/usn/usn-1512-1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-July/084262.html - http://secunia.com/advisories/50008 - http://www.openwall.com/lists/oss-security/2012/07/17/11 - http://www.openwall.com/lists/oss-security/2012/07/13/3 - http://www.openwall.com/lists/oss-security/2012/07/13/4
CVE ID: CVE-2012-3414 State: PUBLISHED Published: 2013-07-19T10:00:00 Last Updated: 2024-08-06T20:05:12.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in swfupload.swf in SWFUpload 2.2.0.1 and earlier, as used in WordPress before 3.3.2, TinyMCE Image Manager 1.1, and other products, allows remote attackers to inject arbitrary web script or HTML via the movieName parameter, related to the "ExternalInterface.call" function. Additional Analyst Notes: - CVE Program Container: References: - http://code.google.com/p/swfupload/issues/detail?id=376 - http://www.securityfocus.com/bid/54245 - http://www.openwall.com/lists/oss-security/2012/07/1
oad/issues/detail?id=376 - http://www.securityfocus.com/bid/54245 - http://www.openwall.com/lists/oss-security/2012/07/17/12 - http://bot24.blogspot.ca/2013/04/swfupload-object-injectioncsrf.html - https://nealpoole.com/blog/2012/05/xss-and-csrf-via-swf-applets-swfupload-plupload/ - http://www.openwall.com/lists/oss-security/2012/07/16/4 - http://make.wordpress.org/core/2013/06/21/secure-swfupload/ - http://packetstormsecurity.com/files/122399/TinyMCE-Image-Manager-1.1-Cross-Site-Scripting.html
CVE ID: CVE-2012-3415 State: REJECTED Published: 2014-04-27T22:00:00 Last Updated: 2014-04-27T21:57:00 Description: No description available.
CVE ID: CVE-2012-3416 State: PUBLISHED Published: 2012-08-25T10:00:00 Last Updated: 2024-08-06T20:05:12.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/77748 - http://rhn.redhat.com/errata/RHSA-2012-1168.html - http://www.securitytracker.com/id?1027395 - http://osvdb.org/84766 - http://secunia.com/advisories/50246 - http://www.securityfocus.com/bid/55032 -
com/id?1027395 - http://osvdb.org/84766 - http://secunia.com/advisories/50246 - http://www.securityfocus.com/bid/55032 - http://secunia.com/advisories/50294 - http://rhn.redhat.com/errata/RHSA-2012-1169.html - http://research.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2012-0002.html
CVE ID: CVE-2012-3417 State: PUBLISHED Published: 2012-08-13T20:00:00 Last Updated: 2024-08-06T20:05:12.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: The good_client function in rquotad (rquota_svc.c) in Linux DiskQuota (aka quota) before 3.17 invokes the hosts_ctl function the first time without a host name, which might allow remote attackers to bypass TCP Wrappers rules in hosts.deny. Additional Analyst Notes: - CVE Program Container: References: - https://hermes.opensuse.org/messages/15509723 - https://bugzilla.redhat.com/show_bug.cgi?id=566717 - http://www.openwall.com/lists/oss-security/2012/07/19/2 - http://rhn.redhat.com/errata/RHSA-2013-0120.html - http://www.openwa
/www.openwall.com/lists/oss-security/2012/07/19/2 - http://rhn.redhat.com/errata/RHSA-2013-0120.html - http://www.openwall.com/lists/oss-security/2012/07/19/5 - http://linuxquota.git.sourceforge.net/git/gitweb.cgi?p=linuxquota/linuxquota%3Ba=commitdiff%3Bh=0abbfe92536fa5854eb65572de0cf131f80e2387 - http://sourceforge.net/tracker/?func=detail&aid=2743481&group_id=18136&atid=118136 - http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
CVE ID: CVE-2012-3418 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-06T20:05:12.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field value greater than the number of actual elements to the __pmDecodeCreds function in p_creds.c; (2) the string byte number value to the __pmDecodeNameList function in p_pmns.c; (3) the numids value to the __pmDecodeIDList function in p_pmns.c; (4) unspecified vectors to the __pmDecodeProfile function in p_profile.c; the (5) status number value or (6) str
pmns.c; (4) unspecified vectors to the __pmDecodeProfile function in p_profile.c; the (5) status number value or (6) string number value to the __pmDecodeNameList function in p_pmns.c; (7) certain input to the __pmDecodeResult function in p_result.c; (8) the name length field (namelen) to the DecodeNameReq function in p_pmns.c; (9) a crafted PDU_FETCH request to the __pmDecodeFetch function in p_fetch.c; (10) the namelen field in the __pmDecodeInstanceReq function in p_instance.c; (11) the buflen field to the __pmDecodeText function in p_text.c; (12) PDU_INSTANCE packets to the __pmDecodeInstance in p_instance.c; or the (13) c_numpmid or (14) v_numval fields to the __pmDecodeLogControl funct
the __pmDecodeInstance in p_instance.c; or the (13) c_numpmid or (14) v_numval fields to the __pmDecodeLogControl function in p_lcontrol.c, which triggers integer overflows, heap-based buffer overflows, and/or buffer over-reads. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=841249 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=49c679c44425915a8d6aa4af5f90b35384843c12 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6 - https://bugzilla.redhat.com/show_bug.cgi?id=841183 - https://bugzilla.
5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6 - https://bugzilla.redhat.com/show_bug.cgi?id=841183 - https://bugzilla.redhat.com/show_bug.cgi?id=840822 - https://hermes.opensuse.org/messages/15540133 - https://bugzilla.redhat.com/show_bug.cgi?id=841698 - https://bugzilla.redhat.com/show_bug.cgi?id=841284 - https://hermes.opensuse.org/messages/15540172 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=e4faa1f0ba29151340920d975fc7639adf8371d5 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=b441980d53be1835b25f0cd6bcc0062da82032dd - https://bugzilla.redhat.com/show_bug.cgi?id=840920 - http://www.openwall.com/lists/oss-security/2012/08/16/1 - http://oss.
tps://bugzilla.redhat.com/show_bug.cgi?id=840920 - http://www.openwall.com/lists/oss-security/2012/08/16/1 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=babd6c5c527f87ec838c13a1b4eba612af6ea27c - http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html - https://bugzilla.redhat.com/show_bug.cgi?id=841112 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=f190942b552aa80d59bbe718866aa00b8e3fd5cc - https://hermes.opensuse.org/messages/15471040 - http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=f0eaefe046b1061797f45b0c20bb2ac
ust/085324.html - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=f0eaefe046b1061797f45b0c20bb2ac371b504a5 - https://bugzilla.redhat.com/show_bug.cgi?id=841126 - https://bugzilla.redhat.com/show_bug.cgi?id=841159 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=7eb479b91ef12bf89a15b078af2107c8c4746a4a - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=9f4e392c97ce42744ec73f82268ce6c815fdca0e - https://bugzilla.redhat.com/show_bug.cgi?id=841240 - https://bugzilla.redhat.com/show_bug.cgi?id=841180 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git
ists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=cced6012b4b93bfb640a9678589ced5416743910 - http://www.debian.org/security/2012/dsa-2533 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commitdiff%3Bh=bfb3ab8c6b3d75b1a6580feee76a7d0925a3633c
CVE ID: CVE-2012-3419 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-06T20:05:12.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Performance Co-Pilot (PCP) before 3.6.5 exports some of the /proc file system, which allows attackers to obtain sensitive information such as proc/pid/maps and command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6 - https://hermes.opensuse.org/messages/15540133 - https://hermes.opensuse.org/messages/15540172 - http://www.openwall
e6 - https://hermes.opensuse.org/messages/15540133 - https://hermes.opensuse.org/messages/15540172 - http://www.openwall.com/lists/oss-security/2012/08/16/1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html - https://hermes.opensuse.org/messages/15471040 - http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html - https://bugzilla.redhat.com/show_bug.cgi?id=841702 - http://www.debian.org/security/2012/dsa-2533
CVE ID: CVE-2012-3420 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-06T20:05:12.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in Performance Co-Pilot (PCP) before 3.6.5 allow remote attackers to cause a denial of service (memory consumption or daemon crash) via a large number of PDUs with (1) a crafted context number to the DoFetch function in pmcd/src/dofetch.c or (2) a negative type value to the __pmGetPDU function in libpcp/src/pdu.c. Additional Analyst Notes: - CVE Program Container: References: - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51
s.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6 - https://hermes.opensuse.org/messages/15540133 - https://hermes.opensuse.org/messages/15540172 - https://bugzilla.redhat.com/show_bug.cgi?id=841319 - http://www.openwall.com/lists/oss-security/2012/08/16/1 - http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html - https://hermes.opensuse.org/messages/15471040 - https://bugzilla.redhat.com/show_bug.cgi?id=841704 - http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html - https://bugzilla.redhat.com/show_bug.cgi?id=841298 - http://oss.s
g/pipermail/package-announce/2012-August/085324.html - https://bugzilla.redhat.com/show_bug.cgi?id=841298 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=68fb968b4ee635bb301dc9ab64e633b0d66d27b4 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html - http://www.debian.org/security/2012/dsa-2533 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=a7dc844d3586ea79887655a97c4252a79751fdae
CVE ID: CVE-2012-3421 State: PUBLISHED Published: 2012-08-27T23:00:00 Last Updated: 2024-08-06T20:05:12.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pduread function in pdu.c in libpcp in Performance Co-Pilot (PCP) before 3.6.5 does not properly time out connections, which allows remote attackers to cause a denial of service (pmcd hang) by sending individual bytes of a PDU separately, related to an "event-driven programming flaw." Additional Analyst Notes: - CVE Program Container: References: - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=blob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6 - https://h
lob%3Bf=CHANGELOG%3Bh=16c9cbb2f61d909487ea1c3171f4ab33e5648ac5%3Bhb=fe51067ae869a4d59f350ac319b09edcb77ac8e6 - https://hermes.opensuse.org/messages/15540133 - https://hermes.opensuse.org/messages/15540172 - http://www.openwall.com/lists/oss-security/2012/08/16/1 - http://oss.sgi.com/cgi-bin/gitweb.cgi?p=pcp/pcp.git%3Ba=commit%3Bh=9ba85dca940de976176ce196fd5e3c4170936354 - http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085333.html - https://hermes.opensuse.org/messages/15471040 - http://lists.fedoraproject.org/pipermail/package-announce/2012-August/085324.html - https://bugzilla.redhat.com/show_bug.cgi?id=841706 - http://lists.opensuse.org/opensuse-security-announce/201
324.html - https://bugzilla.redhat.com/show_bug.cgi?id=841706 - http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00024.html - http://www.debian.org/security/2012/dsa-2533