Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-0056

Опубликовано: 27 янв. 2012
Источник: nvd
CVSS2: 6.9
EPSS Высокий

Описание

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc//mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия от 2.6.39 (включая) до 3.0.18 (исключая)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Версия от 3.1 (включая) до 3.2.2 (исключая)

EPSS

Процентиль: 99%
0.80306
Высокий

6.9 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
больше 13 лет назад

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.

redhat
больше 13 лет назад

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.

debian
больше 13 лет назад

The mem_write function in the Linux kernel before 3.2.2, when ASLR is ...

github
около 3 лет назад

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying process memory, as demonstrated by Mempodipper.

oracle-oval
больше 13 лет назад

ELSA-2012-0052: kernel security and bug fix update (IMPORTANT)

EPSS

Процентиль: 99%
0.80306
Высокий

6.9 Medium

CVSS2

Дефекты

CWE-264