CVE-2012-4555
Published Jan 4, 2013
Last updated 12 years ago
Overview
- Description
- The token processing system (pki-tps) in Red Hat Certificate System (RHCS) before 8.1.3 does not properly handle interruptions of token format operations, which allows remote attackers to cause a denial of service (NULL pointer dereference and Apache httpd web server child process crash) via unspecified vectors.
- Source
- secalert@redhat.com
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:redhat:certificate_system:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AAB4016-809B-4BF9-875C-18B261050AA9",
"versionEndIncluding": "8.1.1"
},
{
"criteria": "cpe:2.3:a:redhat:certificate_system:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A94B7103-11B7-4B1E-AE02-86210F9CCCAA"
},
{
"criteria": "cpe:2.3:a:redhat:certificate_system:7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27FE079E-FB15-443C-BE2E-1D4C940BB8C0"
},
{
"criteria": "cpe:2.3:a:redhat:certificate_system:7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2654E6A-190C-4D5C-ABC0-89011DD8E293"
},
{
"criteria": "cpe:2.3:a:redhat:certificate_system:8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2EF75FF-FCDB-433C-A7B9-4DBAABAC6643"
},
{
"criteria": "cpe:2.3:a:redhat:certificate_system:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "969F1FDC-EB66-4758-B619-C48CA1E5B1AC"
},
{
"criteria": "cpe:2.3:a:redhat:certificate_system:8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25F5AA3E-5776-4B66-A2B7-78A95C37581A"
}
],
"operator": "OR"
}
]
}
]