PT-2012-5372 · Linux+3 · Linux Kernel+3

Tetsuo Handa · Publicado 2012-09-02 · Atualizado 2015-03-26 · CVE-2012-4398

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.4

Description The issue allows local users to cause a denial of service, specifically memory consumption, by utilizing a crafted application. This is due to the request module function in kernel/kmod.c not setting a certain killable attribute.

Recommendations For versions prior to 3.4, update to version 3.4 or later to resolve the issue.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CESA-2013_0223

CVE-2012-4398

RHSA-2012:1282

RHSA-2013:0223

RHSA-2013:1348

RHSA-2013_0223

RHSA-2013_1348

SUSE-RU-2015:0621-1

SUSE-SU-2014_1693-1

SUSE-SU-2014_1693-2

SUSE-SU-2014_1695-1

SUSE-SU-2015:0481-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

SUSE-SU-2015_0481-1

USN-1425-1

USN-1426-1

USN-1431-1

USN-1432-1

USN-1433-1

USN-1440-1

USN-1446-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Suse

Referências · 542

• 🔥 https://github.com/RKX1209/CVE-2014-9322 · Exploit
• https://github.com/torvalds/linux/commit/086ba77a6db00ed858ff07451bedee197df868c9 · Nota
• https://github.com/torvalds/linux/commit/410dd3cf4c9b36f27ed4542ee18b1af5e68645a4 · Nota
• https://github.com/torvalds/linux/commit/e40607cbe270a9e8360907cb1e62ddf0736e4864 · Nota
• https://github.com/torvalds/linux/commit/854e8bb1aa06c578c2c9145fa6bfe3680ef63b23 · Nota
• https://github.com/torvalds/linux/commit/26b87c7881006311828bb0ab271a551a62dcceb4 · Nota
• https://github.com/torvalds/linux/commit/3d32e4dbe71374a6780eaf51d719d76f9a9bf22f · Nota
• https://github.com/torvalds/linux/commit/f2e323ec96077642d397bb1c355def536d489d16 · Nota
• https://github.com/torvalds/linux/commit/9de7922bc709eee2f609cd01d98aaedc4cf5ea74 · Nota
• https://github.com/torvalds/linux/commit/350b8bdd689cd2ab2c67c8a86a0be86cfa0751a7 · Nota
• https://github.com/torvalds/linux/commit/b69040d8e39f20d5215a03502a8e8b4c6ab78395 · Nota
• https://github.com/torvalds/linux/commit/c54def7bd64d7c0b6993336abcffb8444795bf38 · Nota
• https://github.com/torvalds/linux/commit/338f977f4eb441e69bb9a46eaa0ac715c931a67f · Nota
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://github.com/redes-2015/l2tp-socket-bug · Nota