CVE-2012-3418
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
libpcp in Performance Co-Pilot (PCP) before 3.6.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a PDU with the numcreds field value greater than the number of actual elements to the __pmDecodeCreds function in p_creds.c; (2) the string byte number value to the __pmDecodeNameList function in p_pmns.c; (3) the numids value to the __pmDecodeIDList function in p_pmns.c; (4) unspecified vectors to the __pmDecodeProfile function in p_profile.c; the (5) status number value or (6) string number value to the __pmDecodeNameList function in p_pmns.c; (7) certain input to the __pmDecodeResult function in p_result.c; (8) the name length field (namelen) to the DecodeNameReq function in p_pmns.c; (9) a crafted PDU_FETCH request to the __pmDecodeFetch function in p_fetch.c; (10) the namelen field in the __pmDecodeInstanceReq function in p_instance.c; (11) the buflen field to the __pmDecodeText function in p_text.c; (12) PDU_INSTANCE packets to the __pmDecodeInstance in p_instance.c; or the (13) c_numpmid or (14) v_numval fields to the __pmDecodeLogControl function in p_lcontrol.c, which triggers integer overflows, heap-based buffer overflows, and/or buffer over-reads.
libpcp en Performance Co-Pilot (PCP) anterior a v3.6.5 permite a atacantes remotos provocar una denegación de servicio y posiblemente ejecutar código arbitrario a través de (1) una PDU con el valor del campo numcreds mayor que el número de elementos reales de la función __ pmDecodeCreds en p_creds.c, (2) el byte de valor de cadena número a la función pmDecodeNameList __ en p_pmns.c, (3) el valor numids a la función pmDecodeIDList __ en p_pmns.c; (4) vectores no especificados a la función pmDecodeProfile __ en p_profile.c; el (5) estado de valor o número (6) valor numérico cadena a la función __ pmDecodeNameList en p_pmns.c, (7) de entrada determinado en la función __ pmDecodeResult en p_result.c, (8) el campo longitud del nombre (namelen) a la DecodeNameReq en función p_pmns.c; (9) una solicitud PDU_FETCH diseñados a la función pmDecodeFetch __ en p_fetch.c; (10) el campo namelen en la función __ pmDecodeInstanceReq en p_instance.c; (11) el campo buflen a la función pmDecodeText __ en p_text. c; (12) PDU_INSTANCE paquetes a la __ pmDecodeInstance en p_instance.c; o los campos (13) c_numpmid o (14) v_numval a la función pmDecodeLogControl __ en p_lcontrol.c, que desencadena desbordamientos de enteros, basado en heap desbordamientos de búfer, y / o tampón sobre-lee.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2012-06-14 CVE Reserved
- 2012-08-24 CVE Published
- 2024-08-06 CVE Updated
- 2024-11-09 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-189: Numeric Errors
CAPEC
References (30)
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | <= 3.6.4 Search vendor "Sgi" for product "Performance Co-pilot" and version " <= 3.6.4" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.1 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.1" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.2 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.2" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.3 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.3" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.4 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.4" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.5 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.5" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.6 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.6" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.7 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.7" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.8 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.8" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.9 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.9" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.10 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.10" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.1.11 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.1.11" | - |
Affected
| ||||||
| Sgi Search vendor "Sgi" | Performance Co-pilot Search vendor "Sgi" for product "Performance Co-pilot" | 2.2 Search vendor "Sgi" for product "Performance Co-pilot" and version "2.2" | - |
Affected
| ||||||