NVD

Id
47349  
Name
CVE-2012-6704  
Description
The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUF or (2) SO_RCVBUF option.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-12-28  
Modified Date
2016-12-30  
Seq
2012-6704  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
236677 47349 CVE-2012-6704 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=82981930125abfd39d7c8378a9cfdf5e1be2002b  View
236678 47349 CVE-2012-6704 [oss-security] 20161202 Re: CVE Request: Linux: signed overflows for SO_{SND|RCV}BUFFORCE  View
236679 47349 CVE-2012-6704 95135  View
236680 47349 CVE-2012-6704 https://bugzilla.redhat.com/show_bug.cgi?id=1402024  View
236681 47349 CVE-2012-6704 https://github.com/torvalds/linux/commit/82981930125abfd39d7c8378a9cfdf5e1be2002b  View

Related JVN