NVD

Id
43949  
Name
CVE-2012-2100  
Description
The ext4_fill_flex_info function in fs/ext4/super.c in the Linux kernel before 3.2.2, on the x86 platform and unspecified other platforms, allows user-assisted remote attackers to trigger inconsistent filesystem-groups data and possibly cause a denial of service via a malformed ext4 filesystem containing a super block with a large FLEX_BG group size (aka s_log_groups_per_flex value). NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4307.  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2012-07-03  
Modified Date
2013-02-07  
Seq
2012-2100  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
220772 43949 CVE-2012-2100 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=d50f2ab6f050311dbf7b8f5501b25f0bf64a439b  View
220773 43949 CVE-2012-2100 RHSA-2012:1445  View
220774 43949 CVE-2012-2100 RHSA-2012:1580  View
220775 43949 CVE-2012-2100 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.2  View
220776 43949 CVE-2012-2100 [oss-security] 20120412 Re: fix to CVE-2009-4307  View
220777 43949 CVE-2012-2100 53414  View
220778 43949 CVE-2012-2100 https://bugzilla.redhat.com/show_bug.cgi?id=809687  View
220779 43949 CVE-2012-2100 https://github.com/torvalds/linux/commit/d50f2ab6f050311dbf7b8f5501b25f0bf64a439b  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27265 JVNDB-2012-002972 Linux Kernel の fs/ext4/super.c におけるファイルシステムグループデータの不整合を誘発される脆弱性 x86 プラットフォームおよびその他の不特定のプラットフォームで稼働する Linux Kernel の fs/ext4/super.c の ext4_fill_flex_info 関数には、ファイルシステムグループデータの不整合を誘発する、およびサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2012-2100 55338 CVE-2012-2100 43949 7.1 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002972.html 2012-07-03 2012-12-25 View