NVD

Id
43122  
Name
CVE-2012-1097  
Description
The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-05-17  
Modified Date
2013-05-03  
Seq
2012-1097  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
216898 43122 CVE-2012-1097 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c8e252586f8d5de906385d8cf6385fee289a825e  View
216899 43122 CVE-2012-1097 RHSA-2012:0531  View
216900 43122 CVE-2012-1097 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10  View
216901 43122 CVE-2012-1097 [oss-security] 20120305 CVE-2012-1097 kernel: regset: Prevent null pointer reference on readonly regsets  View
216902 43122 CVE-2012-1097 https://bugzilla.redhat.com/show_bug.cgi?id=799209  View
216903 43122 CVE-2012-1097 https://github.com/torvalds/linux/commit/c8e252586f8d5de906385d8cf6385fee289a825e  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26745 JVNDB-2012-002452 Linux Kernel の regset 関数におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 Linux Kernel の regset 関数は、.get および .set メソッドが存在しない場合、適切に処理を行わないため、サービス運用妨害 (NULL ポインタデリファレンス) 状態となる、または詳細不明な影響を受ける脆弱性が存在します。 CVE-2012-1097 54335 CVE-2012-1097 43122 7.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002452.html 2012-05-17 2012-05-18 View