CVE-2012-0804
Fixed in a distro release EPSS 8%
Heap-based buffer overflow in the proxy_connect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTTP response.
Products: cvs
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | cvs | 1.12.12-r0 |
| Alpine 3.11 | cvs | 1.12.12-r0 |
| Alpine 3.12 | cvs | 1.12.12-r0 |
| Alpine 3.13 | cvs | 1.12.12-r0 |
| Alpine 3.14 | cvs | 1.12.12-r0 |
| Alpine 3.15 | cvs | 1.12.12-r0 |
| Alpine 3.16 | cvs | 1.12.12-r0 |
| Alpine 3.17 | cvs | 1.12.12-r0 |
| Alpine 3.22 | cvs | 1.12.12-r0 |
| Alpine 3.23 | cvs | 1.12.12-r0 |
| Alpine 3.24 | cvs | 1.12.12-r0 |
| Alpine 3.8 | cvs | 1.12.12-r0 |
| Alpine 3.9 | cvs | 1.12.12-r0 |
| Debian 12 | cvs | 2:1.12.13+real-7 |
| Debian 13 | cvs | 2:1.12.13+real-7 |
| Debian 14 | cvs | 2:1.12.13+real-7 |
| Debian 6.0 | cvs | 1:1.12.13-12+squeeze1 |
| Red Hat Enterprise Linux 5 | cvs | 0:1.11.22-11.el5_8.1 |
| Red Hat Enterprise Linux 5 | cvs-debuginfo | 0:1.11.22-11.el5_8.1 |
| Red Hat Enterprise Linux 5 | cvs-inetd | 0:1.11.22-11.el5_8.1 |
| Red Hat Enterprise Linux 6 | cvs | 0:1.11.23-11.el6_2.1 |
| Red Hat Enterprise Linux 6 | cvs-debuginfo | 0:1.11.23-11.el6_2.1 |
| openSUSE Tumbleweed | cvs | 1.12.12-183.10 |