CVE-2012-0698: Input Validation
From Andy Lutomirski
The attached Python script will segfault tcsd.
This particular vulnerability is a read from an attacker-controlled address, so getting anything more severe than information disclosure out of it may be difficult. But there is a lot of fishy input validation, and it may be possible to persuade the code to write out of bounds as well. It is certainly possible to cause memory allocation failures, but I haven't seen one that's unchecked yet.
Upstream report (currently private) here: https://sourceforge.net/tracker/?func=detail&atid=704358&aid=3473554&groupid=126012
Other sources
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted typeoffset value in a TCP packet to port 30003.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0698?
CVE-2012-0698 has a low severity due to its limited impact primarily resulting in a segmentation fault.
How do I fix CVE-2012-0698?
To fix CVE-2012-0698, update the TrouSerS package to version 0.3.9 or later.
What software is affected by CVE-2012-0698?
CVE-2012-0698 affects multiple versions of the TrouSerS package, specifically versions up to 0.3.9.
Can CVE-2012-0698 lead to data loss?
CVE-2012-0698 does not appear to facilitate data loss but may result in an application crash.
Is CVE-2012-0698 remotely exploitable?
CVE-2012-0698 is not considered remotely exploitable since it requires local access to trigger the vulnerability.