CVE-2012-2118

EPSS 2.15%
Published 18.05.2012 22:55:03
Last modified 11.04.2025 00:51:21
Source secalert@redhat.com
Teams watchlist Login
Open Login

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name.

Affected products Warnungen 0 Metrics 2 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

X.Org ≫ X11 Version1.11

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	2.15%	0.827

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://patchwork.freedesktop.org/patch/10001/

Patch

http://www.openwall.com/lists/oss-security/2012/04/18/8

http://www.openwall.com/lists/oss-security/2012/04/19/2

http://www.securityfocus.com/bid/53150

https://exchange.xforce.ibmcloud.com/vulnerabilities/74930

https://nvd.nist.gov/vuln/detail/CVE-2012-2118

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2118

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2118

EUVD