CVE-2012-3291
published 2012-06-07CVE-2012-3291: Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
PriorityP336high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.32%
81.5th percentile
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
Affected
32 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openconnect | < openconnect 3.18-1 (bookworm) | openconnect 3.18-1 (bookworm) |
| infradead | openconnect | <= 3.17 | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
| infradead | openconnect | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
osv7.8HIGH
vendor_debian7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6578-wffp-8556: Heap-based buffer overflow in OpenConnect 3
ghsa_unreviewed·2022-05-14
CVE-2012-3291 [HIGH] CWE-119 GHSA-6578-wffp-8556: Heap-based buffer overflow in OpenConnect 3
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
OSV
CVE-2012-3291: Heap-based buffer overflow in OpenConnect 3
osv·2012-06-07·CVSS 7.8
CVE-2012-3291 [HIGH] CVE-2012-3291: Heap-based buffer overflow in OpenConnect 3
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
Debian
CVE-2012-3291: openconnect - Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a ...
vendor_debian·2012·CVSS 7.8
CVE-2012-3291 [HIGH] CVE-2012-3291: openconnect - Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a ...
Heap-based buffer overflow in OpenConnect 3.18 allows remote servers to cause a denial of service via a crafted greeting banner.
Scope: local
bookworm: resolved (fixed in 3.18-1)
bullseye: resolved (fixed in 3.18-1)
forky: resolved (fixed in 3.18-1)
sid: resolved (fixed in 3.18-1)
trixie: resolved (fixed in 3.18-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/14cae65318d3ef1f7d449e463b72b6934e82f1c2http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079747.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00186.htmlhttp://www.debian.org/security/2012/dsa-2495http://www.infradead.org/openconnect/changelog.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17242http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/14cae65318d3ef1f7d449e463b72b6934e82f1c2http://lists.fedoraproject.org/pipermail/package-announce/2012-May/079747.htmlhttp://lists.opensuse.org/opensuse-updates/2013-06/msg00186.htmlhttp://www.debian.org/security/2012/dsa-2495http://www.infradead.org/openconnect/changelog.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17242
2012-06-07
Published