CVE-2012-4001 (Medium) detected in linuxlinux-3.0.40

[mend-bolt-for-github[bot]]

CVE-2012-4001 - Medium Severity Vulnerability

Vulnerable Library - linuxlinux-3.0.40

Apache Software Foundation (ASF)

Library home page: https://mirrors.edge.kernel.org/pub/linux/kernel/v3.0/?wsslib=linux

Found in HEAD commit: 22324ae9738f0a1eeb173ff05137c8317c350189

Found in base branch: master

Vulnerable Source Files (3)

/net/rds/recv.c /net/rds/recv.c /net/rds/recv.c

Vulnerability Details

The mod_pagespeed module before 0.10.22.6 for the Apache HTTP Server does not properly verify its host name, which allows remote attackers to trigger HTTP requests to arbitrary hosts via unspecified vectors, as demonstrated by requests to intranet servers.

Publish Date: 2022-10-03

URL: CVE-2012-4001

CVSS 3 Score Details (5.3)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: Low - Availability Impact: None

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Release Date: 2012-09-15

Fix Resolution: Ubuntu-3.2.0-31.49

---

Step up your Open Source Security Game with Mend here