NVD

Id
43984  
Name
CVE-2012-2136  
Description
The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow and system crash) or possibly gain privileges by leveraging access to a TUN/TAP device.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-08-09  
Modified Date
2013-03-01  
Seq
2012-2136  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221049 43984 CVE-2012-2136 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc  View
221050 43984 CVE-2012-2136 RHSA-2012:0743  View
221051 43984 CVE-2012-2136 RHSA-2012:1087  View
221052 43984 CVE-2012-2136 USN-1529-1  View
221053 43984 CVE-2012-2136 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.5  View
221054 43984 CVE-2012-2136 53721  View
221055 43984 CVE-2012-2136 USN-1535-1  View
221056 43984 CVE-2012-2136 https://bugzilla.redhat.com/show_bug.cgi?id=816289  View
221057 43984 CVE-2012-2136 https://github.com/torvalds/linux/commit/cc9b17ad29ecaa20bfe426a8d4dbfb94b13ff1cc  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27814 JVNDB-2012-003521 Linux Kernel の net/core/sock.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の net/core/sock.c 内の sock_alloc_send_pskb 関数は、特定の length 値を適切に検証しないため、サービス運用妨害 (ヒープベースのバッファオーバーフローおよびシステムクラッシュ) 状態となる、または権限を取得される脆弱性が存在します。 CVE-2012-2136 55374 CVE-2012-2136 43984 7.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003521.html 2012-08-09 2012-11-16 View