NVD

Id
44972  
Name
CVE-2012-3375  
Description
The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in EPOLL_CTL_ADD operations, which allows local users to cause a denial of service (file-descriptor consumption and system crash) via a crafted application that attempts to create a circular epoll dependency. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-1083.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2012-10-03  
Modified Date
2013-08-17  
Seq
2012-3375  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225347 44972 CVE-2012-3375 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=13d518074a952d33d47c428419693f63389547e9  View
225348 44972 CVE-2012-3375 USN-1529-1  View
225349 44972 CVE-2012-3375 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.24  View
225350 44972 CVE-2012-3375 [oss-security] 20120704 Re: CVE Request -- kernel: epoll: can leak file descriptors when returning -ELOOP  View
225351 44972 CVE-2012-3375 1027237  View
225352 44972 CVE-2012-3375 https://bugzilla.redhat.com/show_bug.cgi?id=837502  View
225353 44972 CVE-2012-3375 https://downloads.avaya.com/css/P8/documents/100165733  View
225354 44972 CVE-2012-3375 https://github.com/torvalds/linux/commit/13d518074a952d33d47c428419693f63389547e9  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29014 JVNDB-2012-004721 Linux Kernel の fs/eventpoll.c におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の fs/eventpoll.c 内の epoll_ctl システムコールは、EPOLL_CTL_ADD 操作における ELOOP エラーを適切に処理しないため、サービス運用妨害 (ファイルディスクリプタの消費およびシステムクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-3375 56613 CVE-2012-3375 44972 4.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004721.html 2012-07-25 2012-10-04 View