CVE

Id
55556  
CVE No.
CVE-2012-2313  
Status
Candidate  
Description
The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579611 55556 CVE-2012-2313 MLIST:[oss-security] 20120504 Re: CVE Request: more tight ioctl permissions in dl2k driver  View
579612 55556 CVE-2012-2313 URL:http://www.openwall.com/lists/oss-security/2012/05/04/8  View
579613 55556 CVE-2012-2313 CONFIRM:http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1bb57e940e1958e40d51f2078f50c3a96a9b2d75  View
579614 55556 CVE-2012-2313 CONFIRM:http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7  View
579615 55556 CVE-2012-2313 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=818820  View
579616 55556 CVE-2012-2313 CONFIRM:https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75  View
579617 55556 CVE-2012-2313 HP:HPSBGN02970  View
579618 55556 CVE-2012-2313 URL:http://marc.info/?l=bugtraq&m=139447903326211&w=2  View
579619 55556 CVE-2012-2313 REDHAT:RHSA-2012:1174  View
579620 55556 CVE-2012-2313 URL:http://rhn.redhat.com/errata/RHSA-2012-1174.html  View
579621 55556 CVE-2012-2313 REDHAT:RHSA-2012:1481  View
579622 55556 CVE-2012-2313 URL:http://rhn.redhat.com/errata/RHSA-2012-1481.html  View
579623 55556 CVE-2012-2313 REDHAT:RHSA-2012:1589  View
579624 55556 CVE-2012-2313 URL:http://rhn.redhat.com/errata/RHSA-2012-1589.html  View
579625 55556 CVE-2012-2313 REDHAT:RHSA-2012:1541  View
579626 55556 CVE-2012-2313 URL:http://rhn.redhat.com/errata/RHSA-2012-1541.html  View
579627 55556 CVE-2012-2313 SUSE:SUSE-SU-2015:0812  View
579628 55556 CVE-2012-2313 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00020.html  View
579629 55556 CVE-2012-2313 BID:53965  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27274 JVNDB-2012-002981 Pidgin の MSN プロトコルプラグインにおけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 Pidgin の libpurple 内の MSN プロトコルプラグインの msg.c は、巧妙に細工された文字列を適切に処理しないため、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-2318 55556 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002981.html  View