CVE-2012-3547

MEDIUM · CVSS 6.8 EPSS 5.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-09-18 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-3547

Severity

MEDIUM

CVSS

6.8

EPSS

5.70%

Original Filing — NVD Description

Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via a long "not after" timestamp in a client certificate.