FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2012-3534

This CVE name corresponds to:

Entered	Topic
2012-09-01	GNU gatekeeper -- denial of service

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2012-3534 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2012-3534
Phase	Assigned(20120614)

Description

GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections.

References

Source	Reference
MLIST	[oss-security] 20120824 information request on security bug fix in GNU Gatekeeper 3.1
MLIST	[oss-security] 20120825 Re: information request on security bug fix in GNU Gatekeeper 3.1
MLIST	[oss-security] 20120826 Re: Re: information request on security bug fix in GNU Gatekeeper 3.1
CONFIRM	http://www.gnugk.org/gnugk-3.1.html
SUSE	openSUSE-SU-2016:1856
BID	55198
OSVDB	84862
SECUNIA	50343
XF	gatekeeper-unspec-code-exec(77975)