PT-2016-3471 · Linux+3 · Linux Kernel+3

Manish Honap · Published 2016-05-02 · Updated 2023-01-17 · CVE-2012-6701

Positive Technologies · (AI Summary)

CVSS v3.1

7.8

High

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.4.1

Description The issue is related to an integer overflow in the fs/aio.c file of the Linux kernel. This can be exploited by local users to cause a denial of service or possibly have other unspecified impacts by utilizing a large AIO iovec.

Recommendations For versions prior to 3.4.1, update to version 3.4.1 or later to resolve the issue.

Exploit

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CESA-2018_1854

CVE-2012-6701

OPENSUSE-SU-2016_2144-1

RHSA-2018:1854

RHSA-2018_1854

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 21

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/af_packet_packet_set_ring_priv_esc.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/netfilter_priv_esc_ipv4.rb · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2016-2384 · Exploit
• 🔥 https://github.com/xairy/kernel-exploits/tree/master/CVE-2017-7308 · Exploit
• 🔥 https://github.com/hardenedlinux/offensive_poc/tree/master/CVE-2017-8890 · Exploit
• 🔥 https://github.com/thinkycx/CVE-2017-8890 · Exploit
• 🔥 https://github.com/beraphin/CVE-2017-8890 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2018-3639 · Exploit
• https://github.com/torvalds/linux/commit/a70b52ec1aaeaf60f4739edb1b422827cb6f3893 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-6701 · Security Note
• https://ubuntu.com/security/CVE-2012-6701 · Vendor Advisory
• http://kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.4.1 · Vendor Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a70b52ec1aaeaf60f4739edb1b422827cb6f3893 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-6701 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2018-1854.html · Vendor Advisory