CVE-2012-2385

Published: Jun 29, 2012Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.

Affected (10)

Products: Keith Winstein: Mosh

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Keith Winstein Mosh	version ≤ 1.2-2
Keith Winstein Mosh	Version 0.98c
Keith Winstein Mosh	Version 1.0
Keith Winstein Mosh	Version 1.1.1
Keith Winstein Mosh	Version 1.1.2
Keith Winstein Mosh	Version 1.1.3-1
Keith Winstein Mosh	Version 1.1.3-2
Keith Winstein Mosh	Version 1.1.3
Keith Winstein Mosh	Version 1.1
Keith Winstein Mosh	Version 1.2

Related CWEs

References (22)

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082766.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082814.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082850.html

Source: secalert@redhat.com

http://secunia.com/advisories/49260

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/05/22/9

Source: secalert@redhat.com

http://www.securityfocus.com/bid/53646

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=823943

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/75779

Source: secalert@redhat.com

https://github.com/keithw/mosh/blob/master/ChangeLog

Source: secalert@redhat.com

https://github.com/keithw/mosh/commit/9791768705528e911bfca6c4d8aa88139035060e

Source: secalert@redhat.com

Patch

https://github.com/keithw/mosh/issues/271

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082766.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082814.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082850.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/49260

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/05/22/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/53646

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=823943

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/75779

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/keithw/mosh/blob/master/ChangeLog

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/keithw/mosh/commit/9791768705528e911bfca6c4d8aa88139035060e

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/keithw/mosh/issues/271

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.