CVE-2012-0256
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly...
CVE-2012-0256 is a medium vulnerability (CVSS 5.0) in Apache Traffic Server, published March 26, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.31%, the 88th percentile. Fixed in trafficserver 3.0.4-1.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.31%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.0.4-1trafficserver
Description
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
trafficserverDebian:12 | before 3.0.4-1 | 3.0.4-1 |
What each source reports
NVD Score used
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
- Record
CVE-2012-0256- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
- Record
CVE-2012-0256- Updated
- 2026-11-02
EUVDEUVD-2012-0292No score
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
- Record
EUVD-2012-0292- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j695-8g8p-qf2xNo score
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly...
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
- Record
GHSA-j695-8g8p-qf2x- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
- Record
CVE-2012-0256- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0256No score
Apache Traffic Server 2.0.x and 3.0.x before 3.0.4 and 3.1.x before 3.1.3 does not properly allocate heap memory, which allows remote attackers to cause a denial of service (daemon crash) via a long HTTP Host header.
- Record
DEBIAN-CVE-2012-0256- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
archives.neohapsis.com/archives/bugtraq/2012-03/0118.html
seclists.org/fulldisclosure/2012/Mar/260
securityfocus.com/bid/52696
cert.fi/en/reports/2012/vulnerability612884.html
securitytracker.com/id?1026847
trafficserver.apache.org/downloads
nvd.nist.gov/vuln/detail/CVE-2012-0256
github.com/advisories/GHSA-j695-8g8p-qf2x
security-tracker.debian.org/tracker/CVE-2012-0256