What’s Vulnerable › Vulnerabilities

CVE-2012-2147

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-08-26 · updated 2026-06-16
• Weakness: CWE-399

Description

munin-cgi-graph in Munin 2.0 rc4 allows remote attackers to cause a denial of service (disk or memory consumption) via many image requests with large values in the (1) size_x or (2) size_y parameters.

Affected products

• Munin-Monitoring Munin: 2.0_rc4

References

• http://www.openwall.com/lists/oss-security/2012/04/17/2
• http://www.openwall.com/lists/oss-security/2012/04/18/2
• http://www.openwall.com/lists/oss-security/2012/04/19/3
• http://www.openwall.com/lists/oss-security/2012/04/19/4
• http://www.openwall.com/lists/oss-security/2012/04/19/5
• http://www.openwall.com/lists/oss-security/2012/04/27/7
• http://www.openwall.com/lists/oss-security/2012/04/29/2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/78924
• http://www.openwall.com/lists/oss-security/2012/04/17/2
• http://www.openwall.com/lists/oss-security/2012/04/18/2
• http://www.openwall.com/lists/oss-security/2012/04/19/3
• http://www.openwall.com/lists/oss-security/2012/04/19/4

Get alerted when CVE-2012-2147 or the next vulnerability affects your stack