NVD

Id
47337  
Name
CVE-2012-6689  
Description
The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid field, which allows local users to have an unspecified impact by spoofing Netlink messages.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-05-02  
Modified Date
2016-11-28  
Seq
2012-6689  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
236613 47337 CVE-2012-6689 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=20e1db19db5d6b9e4e83021595eab0dc8f107bef  View
236614 47337 CVE-2012-6689 [linux-kernel] 20120817 [PATCH 0/2] netlink patches  View
236615 47337 CVE-2012-6689 [linux-kernel] 20120817 [PATCH 2/2] [RFC] netlink: fix possible spoofing from non-root processes  View
236616 47337 CVE-2012-6689 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.5.5  View
236617 47337 CVE-2012-6689 [oss-security] 20150222 Re: libmnl: incorrect validation of netlink message origin allows attackers to spoof netlink messages  View
236618 47337 CVE-2012-6689 72739  View
236619 47337 CVE-2012-6689 https://bugzilla.redhat.com/show_bug.cgi?id=848949  View
236620 47337 CVE-2012-6689 https://github.com/torvalds/linux/commit/20e1db19db5d6b9e4e83021595eab0dc8f107bef  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30644 JVNDB-2012-006352 Linux Kernel の net/netlink/af_netlink.c の netlink_sendmsg 関数における脆弱性 Linux Kernel の net/netlink/af_netlink.c の netlink_sendmsg 関数は、dst_pid フィールドを検証しないため、不特定の影響を受ける脆弱性が存在します。 CVE-2012-6689 59927 CVE-2012-6689 47337 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006352.html 2012-10-02 2016-05-11 View