NVD

Id
44134  
Name
CVE-2012-2320  
Description
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2012-05-18  
Modified Date
2012-08-13  
Seq
2012-2320  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221666 44134 CVE-2012-2320 http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=b0ec6eb4466acc57a9ea8be52c17b674b6ea0618  View
221667 44134 CVE-2012-2320 http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=c1b968984212b46bea1330f5ae029507b9bfded9  View
221668 44134 CVE-2012-2320 GLSA-201205-02  View
221669 44134 CVE-2012-2320 [oss-security] 20120507 Re: connman heads up / CVE requests  View
221670 44134 CVE-2012-2320 [oss-security] 20120507 connman heads up / CVE requests  View
221671 44134 CVE-2012-2320 [oss-security] 20120507 Re: connman heads up / CVE requests  View
221672 44134 CVE-2012-2320 53406  View
221673 44134 CVE-2012-2320 connman-netlink-security-bypass(75465)  View
221674 44134 CVE-2012-2320 https://bugzilla.novell.com/show_bug.cgi?id=715172  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
26761 JVNDB-2012-002468 ConnMan におけるアクセス制限を回避される脆弱性 ConnMan は、netlink メッセージがカーネルから発信されていることを確認しないため、アクセス制限を回避される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2012-2320 55558 CVE-2012-2320 44134 7.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002468.html 2012-05-18 2012-09-04 View