CVE-2012-2426

2022-10-0316:15:35

icscert

www.cve.org

xarrow

server

vulnerability

remote attacks

denial of service

6.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.5%

JSON

The server in xArrow before 3.4.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via unspecified vectors.

References

www.us-cert.gov/control_systems/pdf/ICSA-12-145-02.pdf