CVE-2012-2685 — Mckay Cumin vulnerability

CWE-3996 documents5 sources
Severity
4.0MEDIUMNVD
EPSS
1.2%
top 21.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Trevor Mckay CuminRedhat Enterprise MRG
Timeline
PublishedSep 28
Latest updateMay 13

Description

Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

▶NVDtrevor_mckay/cumin0.1.5192-4+19

🔴Vulnerability Details

2
GHSA
GHSA-7whm-p3g6-xq8q: Cumin before 0↗2022-05-13
▶
CVEList
CVE-2012-2685: Cumin before 0↗2012-09-28
▶

📋Vendor Advisories

1
Red Hat
cumin: DoS via large image requests↗2012-09-19
▶

💬Community

2
Bugzilla
CVE-2012-2680 CVE-2012-2681 CVE-2012-2683 CVE-2012-2684 CVE-2012-2685 CVE-2012-2734 CVE-2012-2735 CVE-2012-3459 cumin various flaws [fedora-all]↗2012-09-19
▶
Bugzilla
CVE-2012-2685 cumin: DoS via large image requests↗2012-06-08
▶
CVE-2012-2685 — Trevor Mckay Cumin vulnerability | cvebase