CVE-2012-0698: trustedcomputinggroup trousers
Modified
AliasesRHSA-2014:1507DEBIAN-CVE-2012-0698DSA-2576-1
Published 26-11-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-0698 is a medium (CVSS 5.0) vulnerability in trustedcomputinggroup trousers. EPSS estimates a 10.51% chance of exploitation in the next 30 days, higher than 95.7% of scored vulnerabilities. 1 public exploit is recorded.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
10.51%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits1exploit-database
Timeline
- 26-11-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_offset value in a TCP packet to port 30003.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
10.51%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
No change 0.00 pp
From 10.51% on 22-09-2026
22-09-202622-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
1 foundTrouSerS - Denial of Service
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Redhat4 products
- trousers< 0:0.3.13-2.el6
- trousers-debuginfo< 0:0.3.13-2.el6
- trousers-devel< 0:0.3.13-2.el6
- trousers-static< 0:0.3.13-2.el6
Debian1 product
- trousers< 0.3.5-2+squeeze1 | < 0.3.9-1
Trustedcomputinggroup1 product
- trousers≤ 0.3.9 | 0.2.8 | 0.2.9 | 0.2.9.1 | 0.2.9.2 | 0.3.0 | 0.3.1 | 0.3.2 | 0.3.3 | 0.3.4 | 0.3.5 | 0.3.6 | 0.3.7 | 0.3.8
3 vendors · 6 products
References
18 links- trousers.git.sourceforge.net/git/…X Refsource CONFIRM
- trousers.git.sourceforge.net/git/…X Refsource CONFIRM
- bugs.debian.org/cgi-bin/bugreport.cgi?bug=692649X Refsource CONFIRM
Show all 18 references
- blogs.oracle.com/sunsecurity/entry/cve_2012_0698_denial_ofX Refsource CONFIRM