PT-2012-5450 · Linux+3 · Linux Kernel+3

Dimitry Monakhov · Publicado 2012-12-04 · Atualizado 2023-02-13 · CVE-2012-4508

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.4.16

Description A race condition exists in the fs/ext4/extents.c file of the Linux kernel, allowing local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.

Recommendations For Linux kernel versions prior to 3.4.16, update to version 3.4.16 or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CESA-2013_0496

CVE-2012-4508

DSA-2668-1

RHSA-2012:1491

RHSA-2012:1540

RHSA-2012_1540

RHSA-2013:0496

RHSA-2013:1519

RHSA-2013:1783

RHSA-2013_0496

SUSE-SU-2015:0481-1

USN-1644-1

USN-1645-1

USN-1671-1

USN-1673-1

USN-1704-1

USN-1719-1

USN-1720-1

USN-1726-1

USN-1899-1

USN-1900-1

Produtos afetados

Centos

Linux Kernel

Red Hat

Suse

Referências · 33

• https://github.com/torvalds/linux/commit/dee1f973ca341c266229faa5a1a5bb268bed3531 · Correção
• https://ubuntu.com/security/notices/USN-1719-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-4508 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1704-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1720-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1645-1 · Aviso do Fabricante
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.16 · Nota
• https://ubuntu.com/security/notices/USN-1900-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2012-4508 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-1899-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2012/suse-su-20121679-1.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2012-November/091110.html · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2013-2520.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2013-1519.html · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2013-0496.html · Aviso do Fabricante