NVD

Id
45136  
Name
CVE-2012-3547  
Description
Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via a long "not after" timestamp in a client certificate.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-09-18  
Modified Date
2013-10-30  
Seq
2012-3547  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226554 45136 CVE-2012-3547 20120910 [PRE-SA-2012-06] FreeRADIUS: Stack Overflow in TLS-based EAP Methods  View
226555 45136 CVE-2012-3547 http://freeradius.org/security.html  View
226556 45136 CVE-2012-3547 APPLE-SA-2013-10-22-5  View
226557 45136 CVE-2012-3547 FEDORA-2012-15743  View
226558 45136 CVE-2012-3547 openSUSE-SU-2012:1200  View
226559 45136 CVE-2012-3547 RHSA-2012:1326  View
226560 45136 CVE-2012-3547 RHSA-2012:1327  View
226561 45136 CVE-2012-3547 DSA-2546  View
226562 45136 CVE-2012-3547 MDVSA-2012:159  View
226563 45136 CVE-2012-3547 [oss-security] 20120910 [PRE-SA-2012-06] FreeRADIUS: Stack Overflow in TLS-based EAP Methods  View
226564 45136 CVE-2012-3547 http://www.pre-cert.de/advisories/PRE-SA-2012-06.txt  View
226565 45136 CVE-2012-3547 55483  View
226566 45136 CVE-2012-3547 1027509  View
226567 45136 CVE-2012-3547 USN-1585-1  View
226568 45136 CVE-2012-3547 freeradius-cbtlsverify-bo(78408)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28745 JVNDB-2012-004452 FreeRADIUS の cbtls_verify 関数におけるスタックベースのバッファオーバーフローの脆弱性 FreeRADIUS の cbtls_verify 関数には、TLS ベースの EAP メソッドを使用する際に、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2012-3547 56785 CVE-2012-3547 45136 6.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004452.html 2012-09-10 2013-11-07 View