NVD

Id
43981  
Name
CVE-2012-2133  
Description
Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge pages are enabled, allows local users to cause a denial of service (system crash) or possibly gain privileges by interacting with a hugetlbfs filesystem, as demonstrated by a umount operation that triggers improper handling of quota data.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2012-07-03  
Modified Date
2012-08-13  
Seq
2012-2133  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221031 43981 CVE-2012-2133 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=90481622d75715bfcb68501280a917dbfe516029  View
221032 43981 CVE-2012-2133 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.6  View
221033 43981 CVE-2012-2133 [oss-security] 20120424 Re: CVE Request: use after free bug in "quota" handling in hugetlb code  View
221034 43981 CVE-2012-2133 53233  View
221035 43981 CVE-2012-2133 linux-kernel-hugepages-dos(75168)  View
221036 43981 CVE-2012-2133 https://bugzilla.redhat.com/show_bug.cgi?id=817430  View
221037 43981 CVE-2012-2133 https://github.com/torvalds/linux/commit/90481622d75715bfcb68501280a917dbfe516029  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27266 JVNDB-2012-002973 Linux Kernel におけるサービス運用妨害 (システムクラッシュ) の脆弱性 Linux Kernel には、HugePages が有効である場合、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (システムクラッシュ) 状態となる、または権限を取得される脆弱性が存在します。 CVE-2012-2133 55371 CVE-2012-2133 43981 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002973.html 2012-07-03 2012-07-04 View