CVE-2012-3368
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive...
CVE-2012-3368 is a low vulnerability (CVSS 2.6) in Redhat Dtach, published July 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.16%, the 82nd percentile. Fixed in dtach 0.8-2.1.
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
Exploit likelihood
What each source reports
NVD Score used
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
CVE-2012-3368- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
CVE-2012-3368- Updated
- 2026-11-02
EUVDEUVD-2012-3342 No score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
EUVD-2012-3342- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7m89-h8gh-232j No score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive...
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
GHSA-7m89-h8gh-232j- Updated
- 2026-11-02
OSV No score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
CVE-2012-3368- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3368 No score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
DEBIAN-CVE-2012-3368- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugzilla.redhat.com/show_bug.cgi?id=812551
sourceforge.net/tracker/download.php?group_id=36489&atid=417357&file_id=441195&aid=3517812
bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302
nvd.nist.gov/vuln/detail/CVE-2012-3368
github.com/advisories/GHSA-7m89-h8gh-232j
security-tracker.debian.org/tracker/CVE-2012-3368