PT-2012-6364 · Networkmanager+4 · Networkmanager+5
Pablo Neira Ayuso
·
Publicado
1970-01-01
·
Atualizado
2024-06-15
·
CVE-2012-3520
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 3.2.30
kernel-ec2-extra (affected versions not specified)
kernel-ec2-extra-debuginfo (affected versions not specified)
Description
The issue allows local users to potentially spoof Netlink communication by sending a crafted message, which could be directed to services like Avahi or NetworkManager. Additionally, multiple vulnerabilities in the kernel-ec2-extra and kernel-ec2-extra-debuginfo packages of the openSUSE operating system may lead to disruption of protected information and can be exploited remotely.
Recommendations
For Linux kernel versions prior to 3.2.30, update to version 3.2.30 or later to resolve the issue.
For kernel-ec2-extra, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
For kernel-ec2-extra-debuginfo, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Avahi
Linux Kernel
Networkmanager
Suse
Kernel-Ec2-Extra
Kernel-Ec2-Extra-Debuginfo