PT-2016-3472 · Linux · Linux Kernel

Adam Mariš · Published 2016-06-29 · Updated 2023-01-18 · CVE-2012-6703

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 3.6-rc6-next-20120917

Description The issue is related to an integer overflow in the snd compr allocate buffer function in the ALSA subsystem. This can be exploited by local users via a crafted SNDRV COMPRESS SET PARAMS ioctl call, potentially leading to a denial of service due to insufficient memory allocation or other unspecified impacts.

Recommendations For Linux kernel versions prior to 3.6-rc6-next-20120917, update to a version 3.6-rc6-next-20120917 or later to resolve the issue. As a temporary workaround, consider restricting access to the snd compr allocate buffer function or the SNDRV COMPRESS SET PARAMS ioctl call to minimize the risk of exploitation.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2012-6703

Affected Products

Linux Kernel

References · 16

• https://osv.dev/vulnerability/CVE-2012-6703 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2012-6703 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-6703 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2012-6703 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-6703 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-6703 · Security Note
• https://ubuntu.com/security/CVE-2012-6703 · Vendor Advisory
• https://github.com/torvalds/linux/commit/b35cc8225845112a616e3a2266d2fde5ab13d3ab · Note
• http://seclists.org/oss-sec/2016/q2/616 · Note
• http://openwall.com/lists/oss-security/2016/06/28/6 · Note
• https://kernel.org/pub/linux/kernel/next/patch-v3.6-rc6-next-20120917.xz · Note
• http://securitytracker.com/id/1036190 · Note
• https://t.me/cvenotify/42213 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=1351076 · Note
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b35cc8225845112a616e3a2266d2fde5ab13d3ab · Note