PT-2012-1031 · Linux+3 · Linux Kernel+3

Steve Grubb · Published 2012-04-19 · Updated 2023-10-12 · CVE-2012-2123

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.3.3

Description The issue arises from the improper handling of file system capabilities in the Linux kernel, allowing local users to bypass intended personality restrictions. This can be achieved through a crafted application, as demonstrated by an attack where a parent process is used to disable Address Space Layout Randomization (ASLR).

Recommendations For Linux kernel versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of file system capabilities to minimize the risk of exploitation.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-264

Related Identifiers

BDU:2015-01796

CESA-2012_0743

CVE-2012-2123

DSA-2469-1

RHSA-2012:0670

RHSA-2012:0743

RHSA-2012_0743

SUSE-SU-2012_0904-1

USN-1445-1

USN-1448-1

USN-1452-1

USN-1453-1

USN-1455-1

USN-1457-1

USN-1459-1

USN-1460-1

USN-1470-1

USN-1530-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 34

• http://rhn.redhat.com/errata/RHSA-2012-0743.html · Vendor Advisory
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.3.3 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0879 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4086 · Security Note
• https://ubuntu.com/security/notices/USN-1460-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-0743.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-0670.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1445-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1601 · Security Note
• https://ubuntu.com/security/notices/USN-1459-1 · Vendor Advisory
• http://debian.org/security/2012/dsa-2469 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2012-2020.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2123 · Security Note
• https://ubuntu.com/security/notices/USN-1448-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2123 · Security Note