PT-2012-6332 · Linux+3 · Linux Kernel+7
Li Honggang
·
Published
1970-01-01
·
Updated
2023-02-13
·
CVE-2012-2372
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel version 3.7.4 and earlier
SUSE Linux Enterprise kernel-pae-devel (affected versions not specified)
SUSE Linux Enterprise kernel-xen-devel (affected versions not specified)
SUSE Linux Enterprise gfs2-kmp-xen (affected versions not specified)
SUSE Linux Enterprise kernel-ec2-devel (affected versions not specified)
Description
The issue allows local users to cause a denial of service by establishing an RDS connection with the source IP address equal to the IPoIB interface's own IP address. Multiple vulnerabilities in SUSE Linux Enterprise packages may lead to disruption of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations
For Linux kernel version 3.7.4 and earlier: update to a version later than 3.7.4 to resolve the issue.
For SUSE Linux Enterprise kernel-pae-devel: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
For SUSE Linux Enterprise kernel-xen-devel: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
For SUSE Linux Enterprise gfs2-kmp-xen: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
For SUSE Linux Enterprise kernel-ec2-devel: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Centos
Linux Kernel
Red Hat
Suse Linux Enterprise Gfs2-Kmp-Xen
Suse Linux Enterprise Kernel-Ec2-Devel
Suse Linux Enterprise Kernel-Pae-Devel
Suse Linux Enterprise Kernel-Xen-Devel
Suse