NVD

Id
44127  
Name
CVE-2012-2313  
Description
The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2012-06-13  
Modified Date
2016-09-06  
Seq
2012-2313  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221613 44127 CVE-2012-2313 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1bb57e940e1958e40d51f2078f50c3a96a9b2d75  View
221614 44127 CVE-2012-2313 SUSE-SU-2015:0812  View
221615 44127 CVE-2012-2313 HPSBGN02970  View
221616 44127 CVE-2012-2313 RHSA-2012:1174  View
221617 44127 CVE-2012-2313 RHSA-2012:1481  View
221618 44127 CVE-2012-2313 RHSA-2012:1541  View
221619 44127 CVE-2012-2313 RHSA-2012:1589  View
221620 44127 CVE-2012-2313 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.7  View
221621 44127 CVE-2012-2313 [oss-security] 20120504 Re: CVE Request: more tight ioctl permissions in dl2k driver  View
221622 44127 CVE-2012-2313 53965  View
221623 44127 CVE-2012-2313 https://bugzilla.redhat.com/show_bug.cgi?id=818820  View
221624 44127 CVE-2012-2313 https://github.com/torvalds/linux/commit/1bb57e940e1958e40d51f2078f50c3a96a9b2d75  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27007 JVNDB-2012-002714 Linux Kernel の rio_ioctl 関数における Ethernet アダプタへデータを書き込まれる脆弱性 Linux Kernel の drivers/net/ethernet/dlink/dl2k.c 内の rio_ioctl 関数は、SIOCSMIIREG コマンドへのアクセスを制限しないため、Ethernet アダプタへデータを書き込まれる脆弱性が存在します。 CVE-2012-2313 55551 CVE-2012-2313 44127 1.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002714.html 2012-06-13 2012-12-25 View