CVE-2012-2147

Published: Aug 26, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.

Affected (1)

Products: Munin Monitoring: Munin

Munin Monitoring

1 product

Munin

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Munin Monitoring Munin	Version 2.0_rc4

Related CWEs

CWE-399

References (16)

http://www.openwall.com/lists/oss-security/2012/04/17/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/18/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/19/3

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/19/4

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/19/5

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/27/7

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/29/2

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/78924

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/17/2