PT-2012-5372 · Linux+3 · Linux Kernel+3

Tetsuo Handa

·

Published

2012-09-02

·

Updated

2015-03-26

·

CVE-2012-4398

CVSS v2.0

4.9

Medium

VectorAV:L/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.4
Description The issue allows local users to cause a denial of service, specifically memory consumption, by utilizing a crafted application. This is due to the request module function in kernel/kmod.c not setting a certain killable attribute.
Recommendations For versions prior to 3.4, update to version 3.4 or later to resolve the issue.

Exploit

Fix

DoS

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20

Related Identifiers

CESA-2013_0223
CVE-2012-4398
RHSA-2012:1282
RHSA-2013:0223
RHSA-2013:1348
RHSA-2013_0223
RHSA-2013_1348
SUSE-RU-2015:0621-1
SUSE-SU-2014_1693-1
SUSE-SU-2014_1693-2
SUSE-SU-2014_1695-1
SUSE-SU-2015:0481-1
SUSE-SU-2015:0581-1
SUSE-SU-2015:0736-1
SUSE-SU-2015:1174-1
SUSE-SU-2015:1376-1
SUSE-SU-2015_0481-1
USN-1425-1
USN-1426-1
USN-1431-1
USN-1432-1
USN-1433-1
USN-1440-1
USN-1446-1

Affected Products

Centos
Linux Kernel
Red Hat
Suse