CVE-2012-3534

GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote attackers to cause a denial of service (connection and thread consumption) via a large number of connections.

• CWE-119

• http://lists.opensuse.org/opensuse-updates/2016-07/msg00070.htmlThird Party Advisory
• http://secunia.com/advisories/50343Permissions Required, Vendor Advisory
• http://www.gnugk.org/gnugk-3.1.htmlVendor Advisory
• http://www.openwall.com/lists/oss-security/2012/08/25/3Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/08/25/4Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/08/27/1Third Party Advisory
• http://www.osvdb.org/84862Broken Link
• http://www.securityfocus.com/bid/55198Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77975
• http://lists.opensuse.org/opensuse-updates/2016-07/msg00070.htmlThird Party Advisory
• http://secunia.com/advisories/50343Permissions Required, Vendor Advisory
• http://www.gnugk.org/gnugk-3.1.htmlVendor Advisory
• http://www.openwall.com/lists/oss-security/2012/08/25/3Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/08/25/4Third Party Advisory
• http://www.openwall.com/lists/oss-security/2012/08/27/1Third Party Advisory
• http://www.osvdb.org/84862Broken Link
• http://www.securityfocus.com/bid/55198Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/77975

Published

Aug 31, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3528Multiple cross-site scripting (XSS) vulnerabilities in the b…
• CVE-2012-3529The configuration module in the backend in TYPO3 4.5.x befor…
• CVE-2012-3530Incomplete blacklist vulnerability in the t3lib_div::quoteJS…
• CVE-2012-3531Cross-site scripting (XSS) vulnerability in the Install Tool…
• CVE-2012-3532Cross-site request forgery (CSRF) vulnerability in the GateI…
• CVE-2012-3533The python SDK before 3.1.0.6 and CLI before 3.1.0.8 for oVi…
• CVE-2012-3535Heap-based buffer overflow in OpenJPEG 1.5.0 and earlier all…
• CVE-2012-3536Two XSS vulnerabilities were fixed in message list and view …
• CVE-2012-3537The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/p…
• CVE-2012-3538Pulp in Red Hat CloudForms before 1.1 logs administrative pa…
• CVE-2012-3539Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2012-3540Open redirect vulnerability in views/auth_forms.py in OpenSt…