PT-2016-3471 · Linux+3 · Linux Kernel+3

Manish Honap · Publicado 2016-05-02 · Atualizado 2023-01-17 · CVE-2012-6701

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.4.1

Description The issue is related to an integer overflow in the fs/aio.c file of the Linux kernel. This can be exploited by local users to cause a denial of service or possibly have other unspecified impacts by utilizing a large AIO iovec.

Recommendations For versions prior to 3.4.1, update to version 3.4.1 or later to resolve the issue.

Exploit

Correção

DoS

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CESA-2018_1854

CVE-2012-6701

OPENSUSE-SU-2016_2144-1

RHSA-2018:1854

RHSA-2018_1854

Produtos afetados

Centos

Linux Kernel

Red Hat

Suse

Referências · 21

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/af_packet_packet_set_ring_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_priv_esc_ipv4.rb · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2017-7308 · Exploit
• 🔥 https://github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-8890 · Exploit
• 🔥 https://github.com/thinkycx/CVE-2017-8890 · Exploit
• 🔥 https://github.com/beraphin/CVE-2017-8890 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2018-3639 · Exploit
• https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893 · Aviso do Fabricante
• https://git.kernel.org/cgit/linux/kernel/git/stable/linux-stable.git/commit/?id=07343eab681bf8c22a2b31d978569a5f65253171 · Nota
• http://openwall.com/lists/oss-security/2016/03/02/9 · Nota
• https://cve.org/CVERecord?id=CVE-2012-6701 · Nota de Segurança
• https://git.kernel.org/linus/a70b52ec1aaeaf60f4739edb1b422827cb6f3893 · Nota
• https://ubuntu.com/security/CVE-2012-6701 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=1314288 · Nota