PT-2012-3109 · Linux+3 · Linux Kernel+3

Ulrich Obergfell · Publicado 2012-04-23 · Atualizado 2017-12-29 · CVE-2012-1179

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.3.1

Description The issue allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd none or clear bad function and page faults for huge pages. A privileged user in the KVM guest can use this flaw to crash the host. An unprivileged local user could use this flaw to crash the system.

Recommendations For versions prior to 3.3.1, update to version 3.3.1 or later to resolve the issue. As a temporary workaround, consider restricting administrative access to the guest OS to minimize the risk of exploitation.

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CESA-2012_0743

CVE-2012-1179

RHSA-2012:0743

RHSA-2012:1042

RHSA-2012_0743

USN-1431-1

USN-1433-1

USN-1446-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Suse

Referências · 19

• https://github.com/torvalds/linux/commit/4a1d704194a441bf83c636004a479e01360ec850 · Nota
• http://marc.info/?l=bugtraq&m=139447903326211&w=2 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1431-1 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2012-0743.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2012-March/075781.html · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1446-1 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/03/15/7 · Nota
• http://secunia.com/advisories/48404 · Nota
• https://linux.oracle.com/errata/ELSA-2012-0743.html · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1433-1 · Aviso do Fabricante
• http://secunia.com/advisories/48898 · Nota
• https://ubuntu.com/security/CVE-2012-1179 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-1179 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-1179 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2012-1179 · Nota de Segurança