VULNERABILITY INTELLIGENCE
CVE-2012-4436
CVSS score4.4 MEDIUM
EPSS probability0.66%
CISA KEVNot currently listed
Published2012-10-22
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the run_last_args function in client/fwknop.c in fwknop before 2.0.3, when processing --last, might allow local users to cause a denial of service (client crash) and possibly execute arbitrary code via many .fwknop.run arguments.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer