CVE-2012-3534

MOYENNE 5.0CVE-2012-3534 · Published 31/08/2012 · updated 16/06/2026

En bref

CVE-2012-3534 est une vulnérabilité MOYENNE (CVSS 5.0) touchant gnu gatekeeper (gnugk).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.9%, plus élevée que 90.3% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
gnu gatekeeper gnugk	`= 2.0.3= 2.0.4= 2.0.5= 2.0.6= 2.0.7= 2.0.8= 2.0.9= 2.2.0= 2.2.1= 2.2.2= 2.2.3= 2.2.4= 2.2.5= 2.2.6= 2.2.7= 2.2.8= 2.2.9= 2.3.0= 2.3.1= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 3.0≤ 3.1`	No fix yet

Description

GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections.

References

lists.opensuse.org/opensuse-updates/2016-07/msg00070.html · Third Party Advisory
secunia.com/advisories/50343 · Permissions Required
gnugk.org/gnugk-3.1.html · Vendor Advisory
openwall.com/lists/oss-security/2012/08/25/3 · Third Party Advisory
openwall.com/lists/oss-security/2012/08/25/4 · Third Party Advisory
openwall.com/lists/oss-security/2012/08/27/1 · Third Party Advisory
osvdb.org/84862 · Broken Link
securityfocus.com/bid/55198 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/77975

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free