NVD

Id
45112  
Name
CVE-2012-3520  
Description
The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCM_CREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to (1) Avahi or (2) NetworkManager.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-10-03  
Modified Date
2016-10-11  
Seq
2012-3520  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226365 45112 CVE-2012-3520 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e0e3cea46d31d23dc40df0a49a7a2c04fe8edfea  View
226366 45112 CVE-2012-3520 openSUSE-SU-2012:1330  View
226367 45112 CVE-2012-3520 openSUSE-SU-2013:0261  View
226368 45112 CVE-2012-3520 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.30  View
226369 45112 CVE-2012-3520 [oss-security] 20120822 CVE-2012-3520 kernel: af_netlink: invalid handling of SCM_CREDENTIALS passing  View
226370 45112 CVE-2012-3520 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
226371 45112 CVE-2012-3520 55152  View
226372 45112 CVE-2012-3520 USN-1599-1  View
226373 45112 CVE-2012-3520 USN-1610-1  View
226374 45112 CVE-2012-3520 https://bugzilla.redhat.com/show_bug.cgi?id=850449  View
226375 45112 CVE-2012-3520 https://github.com/torvalds/linux/commit/e0e3cea46d31d23dc40df0a49a7a2c04fe8edfea  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29018 JVNDB-2012-004725 Linux Kernel の Netlink の実装おける Netlink 通信を偽造される脆弱性 Linux Kernel の Netlink の実装は、SCM_CREDENTIALS データのないメッセージを適切に処理しないため、Netlink 通信を偽造される脆弱性が存在します。 CVE-2012-3520 56758 CVE-2012-3520 45112 1.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004725.html 2012-09-19 2012-11-09 View