Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2012-0804
HistoryMay 29, 2012 - 8:55 p.m.

CVE-2012-0804

2012-05-2920:55:06
CWE-119
[email protected]
web.nvd.nist.gov
80
cve-2012-0804
buffer overflow
denial of service
remote code execution
cvs 1.11
cvs 1.12
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

81.1%

JSON

Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.

Affected configurations

NVD
Node
cvscvsMatch1.11
OR
cvscvsMatch1.12
CPENameOperatorVersion
cvs:cvscvseq1.11
cvs:cvscvseq1.12

Related

nessus 16
gentoo 1
openvas 17
veracode 1
cvelist 1
redhat 1
amazon 1
debiancve 1
alpinelinux 1
securityvulns 2
osv 1
fedora 2
nvd 1
ubuntu 1
prion 1
oraclelinux 1
debian 1
centos 1
ubuntucve 1
nessus
nessus
openSUSE Security Update : cvs (openSUSE-SU-2012:0310-1)
2014-06-13 00:00:00
Fedora 16 : cvs-1.11.23-22.fc16 (2012-1383)
2012-02-16 00:00:00
GLSA-201701-44 : CVS: Heap-based overflow
2017-01-20 00:00:00
gentoo
gentoo
CVS: Heap-based overflow
2017-01-19 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2012-51)
2015-09-08 00:00:00
Mandriva Update for cvs MDVSA-2012:044 (cvs)
2012-08-03 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0311-1)
2021-06-09 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:10:59
cvelist
cvelist
CVE-2012-0804
2012-05-29 20:00:00
redhat
redhat
(RHSA-2012:0321) Moderate: cvs security update
2012-02-21 00:00:00
amazon
amazon
Medium: cvs
2012-03-04 16:12:00
debiancve
debiancve
CVE-2012-0804
2012-05-29 20:55:06
alpinelinux
alpinelinux
CVE-2012-0804
2012-05-29 20:55:06
securityvulns
securityvulns
[SECURITY] [DSA 2407-1] cvs security update
2012-02-12 00:00:00
CVS client buffer overflow
2012-02-12 00:00:00
osv
osv
CVE-2012-0804
2012-05-29 20:55:00
fedora
fedora
[SECURITY] Fedora 16 Update: cvs-1.11.23-22.fc16
2012-02-15 11:36:55
[SECURITY] Fedora 15 Update: cvs-1.11.23-17.fc15
2012-02-15 11:29:56
nvd
nvd
CVE-2012-0804
2012-05-29 20:55:06
ubuntu
ubuntu
cvs vulnerability
2012-02-22 00:00:00
prion
prion
Heap overflow
2012-05-29 20:55:00
oraclelinux
oraclelinux
cvs security update
2012-02-21 00:00:00
debian
debian
[SECURITY] [DSA 2407-1] cvs security update
2012-02-09 13:05:07
centos
centos
cvs security update
2012-02-22 14:28:34
ubuntucve
ubuntucve
CVE-2012-0804
2012-02-09 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

81.1%

JSON
Related for CVE-2012-0804
nessus16gentoo1openvas17veracode1cvelist1redhat1amazon1debiancve1alpinelinux1securityvulns2osv1fedora2nvd1ubuntu1prion1oraclelinux1debian1centos1ubuntucve1