CVE-2012-2147
published 2012-08-26CVE-2012-2147: munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in…
PriorityP422medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.86%
76.6th percentile
munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | munin | < munin 2.0~rc6-1 (bookworm) | munin 2.0~rc6-1 (bookworm) |
| munin-monitoring | munin | — | — |
| munin-monitoring | munin | >= 0 < 2.0~rc6-1 | 2.0~rc6-1 |
| munin-monitoring | munin | >= 0 < 2.0~rc6-1 | 2.0~rc6-1 |
| munin-monitoring | munin | >= 0 < 2.0~rc6-1 | 2.0~rc6-1 |
| munin-monitoring | munin | >= 0 < 2.0~rc6-1 | 2.0~rc6-1 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2012-2147: munin - munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of se...
vendor_debian·2012·CVSS 5.0
CVE-2012-2147 [MEDIUM] CVE-2012-2147: munin - munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of se...
munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.
Scope: local
bookworm: resolved (fixed in 2.0~rc6-1)
bullseye: resolved (fixed in 2.0~rc6-1)
forky: resolved (fixed in 2.0~rc6-1)
sid: resolved (fixed in 2.0~rc6-1)
trixie: resolved (fixed in 2.0~rc6-1)
GHSA
GHSA-8h28-5hcj-h4qw: munin-cgi-graph in Munin 2
ghsa_unreviewed·2022-05-17
CVE-2012-2147 [MEDIUM] GHSA-8h28-5hcj-h4qw: munin-cgi-graph in Munin 2
munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.
OSV
CVE-2012-2147: munin-cgi-graph in Munin 2
osv·2012-08-26·CVSS 5.0
CVE-2012-2147 [MEDIUM] CVE-2012-2147: munin-cgi-graph in Munin 2
munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2012/04/17/2http://www.openwall.com/lists/oss-security/2012/04/18/2http://www.openwall.com/lists/oss-security/2012/04/19/3http://www.openwall.com/lists/oss-security/2012/04/19/4http://www.openwall.com/lists/oss-security/2012/04/19/5http://www.openwall.com/lists/oss-security/2012/04/27/7http://www.openwall.com/lists/oss-security/2012/04/29/2https://exchange.xforce.ibmcloud.com/vulnerabilities/78924http://www.openwall.com/lists/oss-security/2012/04/17/2http://www.openwall.com/lists/oss-security/2012/04/18/2http://www.openwall.com/lists/oss-security/2012/04/19/3http://www.openwall.com/lists/oss-security/2012/04/19/4http://www.openwall.com/lists/oss-security/2012/04/19/5http://www.openwall.com/lists/oss-security/2012/04/27/7http://www.openwall.com/lists/oss-security/2012/04/29/2https://exchange.xforce.ibmcloud.com/vulnerabilities/78924
2012-08-26
Published