CVE Database


Impact: Moderate
Public: 2014-07-09
Bugzilla: 830254: CVE-2012-2682 cumin: DoS via displayed link names containing non-ASCII characters


It was found that if Cumin were asked to display a link name containing non-ASCII characters, the request would terminate with an error. If data containing non-ASCII characters were added to the database (such as via Cumin or Wallaby), requests to load said data would terminate and the requested page would not be displayed until an administrator cleans the database.

Find out more about CVE-2012-2682 from the MITRE CVE dictionary and NIST NVD.

CVSS v2 metrics

Base Score: 5.0
Base Metrics: AV:N/AC:L/Au:N/C:N/I:N/A:P
Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality Impact: None
Integrity Impact: None
Availability Impact: Partial

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Red Hat security errata

Platform Errata Release Date
MRG Grid for RHEL 5 Server v.2 (cumin) RHSA-2014:0859 July 09, 2014
MRG Grid for RHEL 6 Server v.2 (cumin) RHSA-2014:0858 July 09, 2014

External References


This issue was discovered by Stanislav Graf of Red Hat.

This page is generated automatically and has not been checked for errors or omissions.

For clarification or corrections please contact the Red Hat Security Response Team.