CVE-2012-3534: GNU Gatekeeper before 3.1 does not limit the number of connections to the status port, which allows remote...

Security readout for executives and security teams

CVE-2012-3534 is a denial-of-service issue in GNU Gatekeeper before 3.1. An attacker who can reach the status port could open many connections and exhaust connection or thread resources, potentially disrupting gatekeeper availability. Exposure is most likely where GNU Gatekeeper before 3.1 is still deployed and its status port is reachable from untrusted networks. Internet exposure increases business risk. Prioritize remediation for exposed voice or H.323 infrastructure. This is an availability risk, not proven code execution in the supplied evidence, but disruption could affect communications services. Mitigation focus: Upgrade GNU Gatekeeper deployments older than 3.1 according to vendor guidance.; Restrict status port access to trusted management hosts only.; Block status port exposure from the public internet..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.