PT-2012-6364 · Networkmanager+4 · Networkmanager+5

Pablo Neira Ayuso · Published 1970-01-01 · Updated 2024-06-15 · CVE-2012-3520

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.2.30 kernel-ec2-extra (affected versions not specified) kernel-ec2-extra-debuginfo (affected versions not specified)

Description The issue allows local users to potentially spoof Netlink communication by sending a crafted message, which could be directed to services like Avahi or NetworkManager. Additionally, multiple vulnerabilities in the kernel-ec2-extra and kernel-ec2-extra-debuginfo packages of the openSUSE operating system may lead to disruption of protected information and can be exploited remotely.

Recommendations For Linux kernel versions prior to 3.2.30, update to version 3.2.30 or later to resolve the issue. For kernel-ec2-extra, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For kernel-ec2-extra-debuginfo, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-189

CWE-287

Related Identifiers

BDU:2015-05480

BDU:2015-05481

CVE-2012-3520

OPENSUSE-SU-2012_1330-1

OPENSUSE-SU-2024:10128-1

RHSA-2012:1491

USN-1599-1

USN-1610-1

Affected Products

Avahi

Linux Kernel

Networkmanager

Suse

Kernel-Ec2-Extra

Kernel-Ec2-Extra-Debuginfo

References · 107

• 🔥 https://github.com/torvalds/linux/commit/e0e3cea46d31d23dc40df0a49a7a2c04fe8edfea · Exploit
• http://ubuntu.com/usn/USN-1610-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-1610-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-3520 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-3520 · Vendor Advisory
• http://ubuntu.com/usn/USN-1599-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3520 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-05481 · Security Note
• https://bdu.fstec.ru/vul/2015-05480 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2012-3520 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-02/msg00018.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00005.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-3520 · Security Note
• https://cve.org/CVERecord?id=CVE-2012-3520 · Security Note
• https://ubuntu.com/security/CVE-2012-3520 · Vendor Advisory