NVD

Id
45850  
Name
CVE-2012-4467  
Description
The (1) do_siocgstamp and (2) do_siocgstampns functions in net/socket.c in the Linux kernel before 3.5.4 use an incorrect argument order, which allows local users to obtain sensitive information from kernel memory or cause a denial of service (system crash) via a crafted ioctl call.  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:N/A:C)  
Pub Date
2017-01-19  
Published
2012-10-10  
Modified Date
2013-01-29  
Seq
2012-4467  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230232 45850 CVE-2012-4467 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ed6fe9d614fc1bca95eb8c0ccd0e92db00ef9d5d  View
230233 45850 CVE-2012-4467 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.4  View
230234 45850 CVE-2012-4467 [oss-security] 20121003 Re: CVE Request -- kernel: compat: SIOCGSTAMP/SIOCGSTAMPNS incorrect order of arguments to compat_put_time[val|spec]  View
230235 45850 CVE-2012-4467 55785  View
230236 45850 CVE-2012-4467 https://github.com/torvalds/linux/commit/ed6fe9d614fc1bca95eb8c0ccd0e92db00ef9d5d  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29208 JVNDB-2012-004915 Linux Kernel の net/socket.c における重要な情報を取得される脆弱性 Linux Kernel の net/socket.c 内の (1) do_siocgstamp および (2) do_siocgstampns 関数は、不正な引数順序を使用するため、カーネルメモリから重要な情報を取得される、またはサービス運用妨害 (システムクラッシュ) 状態となる脆弱性が存在します。 CVE-2012-4467 57705 CVE-2012-4467 45850 6.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004915.html 2012-09-14 2012-10-15 View