CVE-2012-2685
UnknownEPSS 2.16%
Last modified
CVE-2012-2685 is a vulnerability of currently unknown severity. Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request.. EPSS estimates a 2.16% chance of exploitation in the next 30 days.
Description
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Trevor Mckay | Cumin | <= 0.1.5192-4 |
| Trevor Mckay | Cumin | 0.1.3160-1 |
| Trevor Mckay | Cumin | 0.1.4369-1 |
| Trevor Mckay | Cumin | 0.1.4410-2 |
| Trevor Mckay | Cumin | 0.1.4494-1 |
| Trevor Mckay | Cumin | 0.1.4794-1 |
| Trevor Mckay | Cumin | 0.1.4916-1 |
| Trevor Mckay | Cumin | 0.1.5033-1 |
| Trevor Mckay | Cumin | 0.1.5037-1 |
| Trevor Mckay | Cumin | 0.1.5054-1 |
| Trevor Mckay | Cumin | 0.1.5068-1 |
| Trevor Mckay | Cumin | 0.1.5092-1 |
| Trevor Mckay | Cumin | 0.1.5098-2 |
| Trevor Mckay | Cumin | 0.1.5105-1 |
| Trevor Mckay | Cumin | 0.1.5137-1 |
| Trevor Mckay | Cumin | 0.1.5137-2 |
| Trevor Mckay | Cumin | 0.1.5137-3 |
| Trevor Mckay | Cumin | 0.1.5137-4 |
| Trevor Mckay | Cumin | 0.1.5137-5 |
| Trevor Mckay | Cumin | 0.1.5192-1 |
| Redhat | Enterprise Mrg | 2.0 |
References
- http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-2685?
Cumin before 0.1.5444, as used in Red Hat Enterprise Messaging, Realtime, and Grid (MRG) 2.0, allows remote authenticated users to cause a denial of service (memory consumption) via a large size in an image request.
How severe is CVE-2012-2685?
Severity scoring for CVE-2012-2685 is pending analysis. The EPSS model estimates a 2.16% probability of exploitation in the next 30 days.
How do I fix CVE-2012-2685?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2012-2685?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST