CVE-2012-2147 | Vulnerability Database | Aqua Security

NVD

https://nvd.nist.gov/vuln/detail/CVE-2012-2147

CWE

https://cwe.mitre.org/data/definitions/399.html

munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.

Affected Software

Name	Vendor	Start Version	End Version
Munin	Munin-monitoring	2.0_rc4 (including)	2.0_rc4 (including)
Munin	Ubuntu	hardy	*
Munin	Ubuntu	upstream	*

References

http://www.openwall.com/lists/oss-security/2012/04/17/2
http://www.openwall.com/lists/oss-security/2012/04/18/2
http://www.openwall.com/lists/oss-security/2012/04/19/3
http://www.openwall.com/lists/oss-security/2012/04/19/4
http://www.openwall.com/lists/oss-security/2012/04/19/5
http://www.openwall.com/lists/oss-security/2012/04/27/7
http://www.openwall.com/lists/oss-security/2012/04/29/2
https://exchange.xforce.ibmcloud.com/vulnerabilities/78924