CVE-2012-2385 The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
MediumCVSS 4.0
EPSS 10.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The terminal dispatcher in mosh before 1.2.1 allows remote authenticated users to cause a denial of service (long loop and CPU consumption) via an escape sequence with a large repeat count value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/mosh(Debian:12) | < 1.2.1-1 | 1.2.1-1 |
| debian/mosh(Debian:13) | < 1.2.1-1 | 1.2.1-1 |
| debian/mosh(Debian:14) | < 1.2.1-1 | 1.2.1-1 |
| keith winstein mosh | <= 1.2-2 | No fix listed |
| keith winstein mosh | = 0.98c | No fix listed |
| keith winstein mosh | = 1.0 | No fix listed |
| keith winstein mosh | = 1.1 | No fix listed |
| keith winstein mosh | = 1.1.1 | No fix listed |
| keith winstein mosh | = 1.1.2 | No fix listed |
| keith winstein mosh | = 1.1.3 | No fix listed |
| keith winstein mosh | = 1.1.3-1 | No fix listed |
| keith winstein mosh | = 1.1.3-2 | No fix listed |
| keith winstein mosh | = 1.2 | No fix listed |
References
- Debian Security Tracker CVE-2012-2385 vendor-advisory
- bugs.debian.org issue-tracking
- FEDORA-2012-9422 vendor-advisory
- FEDORA-2012-9414 vendor-advisory
- FEDORA-2012-9442 vendor-advisory
- 49260 third-party-advisory
- [oss-security] 20120522 Re: CVE Request -- mosh (and probably vte too): mosh server DoS (long loop) due improper parsing of terminal parameters in terminal dispatcher mailing-list
- 53646 vdb-entry
- bugzilla.redhat.com
- mosh-sequences-dos(75779) vdb-entry
- github.com
- github.com patch
- github.com