CVE-2012-1097

Опубликовано: 17 мая 2012

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact via a (1) PTRACE_GETREGSET or (2) PTRACE_SETREGSET ptrace call.

Ссылки

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c8e252586f8d5de906385d8cf6385fee289a825e
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0481.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0531.html
Third Party Advisory
http://secunia.com/advisories/48842
Broken Link
http://secunia.com/advisories/48898
Broken Link
http://secunia.com/advisories/48964
Broken Link
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.10
Mailing List
Patch
Vendor Advisory
http://www.openwall.com/lists/oss-security/2012/03/05/1
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=799209
Issue Tracking
Patch
Third Party Advisory
https://github.com/torvalds/linux/commit/c8e252586f8d5de906385d8cf6385fee289a825e
Patch
Third Party Advisory
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=c8e252586f8d5de906385d8cf6385fee289a825e
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00021.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-05/msg00013.html
Mailing List
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0481.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2012-0531.html
Third Party Advisory
http://secunia.com/advisories/48842
Broken Link
http://secunia.com/advisories/48898
Broken Link
http://secunia.com/advisories/48964
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 3.0.24 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 3.1 (включая) до 3.2.10 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_mrg:2.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp2:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:vmware:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:-:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:*:vmware:*:*

cpe:2.3:o:suse:linux_enterprise_server:11:sp2:*:*:-:*:*:*

EPSS

Процентиль: 30%

0.00107

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2012-1097

CVSS3: 7.8

ubuntu

около 13 лет назад

CVE-2012-1097

redhat

больше 13 лет назад

CVE-2012-1097

CVSS3: 7.8

debian

около 13 лет назад

The regset (aka register set) feature in the Linux kernel before 3.2.1 ...

GHSA-j2h3-37r3-qm7f

CVSS3: 7.8

github

около 3 лет назад

ELSA-2012-2008

oracle-oval

около 13 лет назад

ELSA-2012-2008: Unbreakable Enterprise kernel security and bug fix update (MODERATE)

EPSS

Процентиль: 30%

0.00107

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-476