CVE-2012-3368
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive...
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
Exploit likelihood
What each source reports
NVD Score used
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
CVE-2012-3368- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE ListNo score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
CVE-2012-3368- Updated
- 2026-11-02
EUVDEUVD-2012-3342No score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
EUVD-2012-3342- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7m89-h8gh-232jNo score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive...
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
GHSA-7m89-h8gh-232j- Updated
- 2026-11-02
OSVNo score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
CVE-2012-3368- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3368No score
Integer signedness error in attach.c in dtach 0.8 allows remote attackers to obtain sensitive information from daemon stack memory in opportunistic circumstances by reading application data after an improper connection-close request, as demonstrated by running an IRC client in dtach.
- Record
DEBIAN-CVE-2012-3368- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3368 is a low vulnerability (CVSS 2.6) in Redhat Dtach, published July 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.14%, the 82nd percentile. Fixed in dtach 0.8-2.1.
References
bugzilla.redhat.com/show_bug.cgi?id=812551
sourceforge.net/tracker/download.php?group_id=36489&atid=417357&file_id=441195&aid=3517812
bugs.debian.org/cgi-bin/bugreport.cgi?bug=625302
nvd.nist.gov/vuln/detail/CVE-2012-3368
github.com/advisories/GHSA-7m89-h8gh-232j
security-tracker.debian.org/tracker/CVE-2012-3368